"Here's what happened. When Google rolled out Buzz last week they activated an unknown number of users and chose people for them to follow automatically based on who they email most frequently with. Presumably these people had to also be on Gmail. And the list of people you follow is public. Therefore the list of people you email with most frequently is now public. They are now trying to close this hole as quickly as possible. But the damage is done, people have to realize that -- the information was already disclosed. You can close the door after the horse gets out but that doesn't get the horse back."
read more
here and
here