Web skimming with Google AnalyticsRecently, we identified several cases where Google Analytics was misused: attackers injected malicious code into sites, which collected all the data entered by users, and then sent it via Analytics.
Source:
Web skimming with Google Analytics