On HN itself: https://news.ycombinator.com/item?id=14277202

Confirmed 5 years later in media; https://www.bloomberg.com/news/articles/2013-09-20/linkedin-...

They used a legit google oauth but with broad rights. They did pull the contact and repeatedly spam them as personal emails. There were lawsuits.