> Paris Hilton's address book, famously kept on a T-Mobile Sidekick, has
>> been popping up all over the internet after someone managed to figure
>> out her password.
> Do we know for sure that this was just a guessed password?
Articles I read said that it was a well-known hole in T-Mobile's website which allowed somebody who knew a customer's phone number to reset her password.
See
formatting link