Citing an unnamed person with direct knowledge of the investigation, the Times reported on Monday that those behind the attack managed to steal Google's password system, code-named Gaia, which controls millions of users' access to all of Google's web services, including email and other business applications.