Yes. I also have a database snapshot from a little before the attack which I can use to verify people by email if necessary.