There is still a lot of mystery surrounding what was found on the disk recovered by authorities related to the CM money laundering website therefore is there any way to independently verify this claim. I am not doubting what you are saying but can the claim be proven?
As all the ww-address transactions take place on Whirlwind and are not associated with the Bitcoin network, the question then arises how safe or secure is the database is that contains all the details of the addresses and transactions. Is it encrypted at REST?
The databases (backend and the 3 signers) only contain the encrypted Note public addresses and their balances, no sensitive information about deposits/withdrawals or pay to note transfers. Whenever a user performs an action it has to be validated by the backend and all 3 signers individually. These proofs are deleted immediately after their use.