I was thinking of the iCloud celebrity hack, but you're right - Wikipedia explains that it was initially thought to be a hack, but turned out to be due to phishing. (Though it does mention an exploit that could have been taken advantage of at the time.) I've edited my original comment to remove that part.