I sympathize with the fact that this guy isn't returning the excess Bitcoin, but posting _all_ of their info publicly is a bit extreme to me - and completely against your current privacy policy.
The current privacy policy states:
But we will disclose these information ...... to protect against misuse or unauthorized use of our website.I'm not quite sure how that clause applies to the current situation: extra funds were sent to someone and you want them back - how is that misuse of the website? If this is your policy then please be explicit about it and detail the exact circumstances. For example, if a refund is necessary and you send too much, but can't get a hold of the person to get your money back will you publicly release all their info? What if they happened to have just been on holiday for a week or two and that was why you couldn't reach them? What if you call but the person hangs up because the person that picked up the phone didn't speak English? There are all kinds of possible misunderstandings that could happen and it'd be nice to know which ones might trigger the completely public release of information.