You would have to hack the exchange.
Or you would have to get the Government involved so that they will confiscate the user database and conveniently hand it over to you 
I personally don't think the second one is an option, so happy hacking 

However, sometimes you can identify addresses by their exchange if they use a prefix.
For example like this:

These are exchange addresses but it's not going to help you any further.