Impersonating is easy but getting access to someone's contacts means they managed to get into the account.
Hotmail sux, I once had an account and apart from the fact that they decided to delete all my folders because I hadn't used the account for a few months, someone had got into it once...