I remember reading somewhere about the "google aurora hack" that the hackers were able to access gmails built-in backroom and were monitoring email accounts. I cannot find the link right now but here are a couple for google and facebook.

Google: http://www.google.com/transparencyreport/userdatarequests/

Facebook: http://www.facebook.com/safety/groups/law/guidelines/