I assume it's https://www.washingtonpost.com/world/national-security/chinese-hackers-who-breached-google-gained-access-to-sensitive-data-us-officials-say/2013/

I assume it's https://www.washingtonpost.com/world/national-security/chinese-hackers-who-breached-google-gained-access-to-sensitive-data-us-officials-say/2013/05/20/51330428-be34-11e2-89c9-3be8095fe767_story.html https://www.washingtonpost.com/world/national-security/chine... but it wasn't "PRISM-like", it was an internal database of accounts under court ordered surveillance (in this case, orders specifically "issued under the Foreign Intelligence Surveillance Act"), and it wasn't the attack vector, it was apparently the attack target.