I mentioned this to Gmail people at Google, but it's unclear how the bad guys added malicious forwarding rules to Gmail. It could also have been password guessing or other low-tech attacks, too. I'm sure that we'll be looking into this, though.
- Matt Cutts