I always had the same hypothesis as to how they were able to find those random connections. Which is why I refuse to give any social network access to my email contact list. For my own privacy and for my contacts privacy.
Gonna be fun times when everyone has Google Glass and that data leaks or, more likely, continues to be volunteered by others without my consent.