This is one of the addresses which received funds from the 1MLTfBmQ42eTSG5vr4JuSqfHeG13NuygDe address after the fraudulent event:

https://blockchain.info/tree/109606503



1MLTfBmQ42eTSG5vr4JuSqfHeG13NuygDe -> 1FvHmAWYy7DQzHf3tsstbiSnrbbuihsrVn -> 1GhnRVmmPVizq7cLmyg6VB7CKwfA9BTFWe

This address is associated to a nick used in the bitcoin-otc.org Internet page:

http://bitcoin-otc.com/viewgpg.php?nick=jnbitcoin

The nick was also used to open an account in this forum:

https://bitcointalk.org/index.php?action=profile;u=204801

A Google search reveals some information about the nick:

http://webcache.googleusercontent.com/search?q=cache:m7d-uf6UvXoJ:https://localbitcoins.com/accounts/profile/jnbitcoins/+&cd=6&hl=en&ct=clnk&gl=uk&lr=lang_en%7Clang_pt



Notice the above profile was already erased from the localbitcoins.com Internet page, however it was in use just few days ago.

The nick was also used to register an account in the wordpress.org Internet page:

http://wordpress.org/support/topic/payment-not-transferring-to-main-wallet