I'm not sure what that "manual recovery previously queued ownership change completed" means from BPIP, nor do I know how much weight it has as evidence that the account changed hands.
It means the the owner was able to prove that the account is theirs (e.g. via e-mail address ownership, or a signed message) and regained access to their account, which was presumably hacked but I can imagine that an unscrupulous account seller could also steal back a sold account this way so it doesn't really prove much. The message itself comes from
seclog.