I don't think the accounts were hacked or bought though, since emails weren't changed, owner probably forgot passwords.
The post gaps, pattern of writings, timing of changing passwords all show those accounts were bought along with Email address. You probably know there are platforms where account owners sell their accounts along with emails.
Post gap means nothing, even if an account is bought with the email, It's usually just to make sure the owner cannot lock it after a password reset. Most buyers will still change email, I'd say.
Thank you for noticing it. You just exposed more of his high ranked account! I have wasted enough time on this scammer. But to dig deep I will continue tomorrow! Cheers.
Bitcointalk Userame: pgbit
BTC Address: 325FFTmBpgwBdQBeVX1N7vSSSgtwxcEqwZ
Archive:
http://archive.is/wip/VlybgYou're going about this wrongly, this is probably the user''s application which he copied and edited