So, he only has access to a partial version of the database that apparently does not contain user email addresses?! How convenient.
Yet they can somehow check if the username/email exists in the database.

[...]
Ahh... I was just from that thread, being curious and asking the same matter. One other thing that's also interesting, given they're pursuing legal action against the perpetrator who stole their IP, I think they can ask a court appointed entity to access this database currently being possessed by the perpetrator and send an email blast to their customer informing about this refund. I am pretty much sure one of the IP being stolen was email database, given many user of betnomi got unsolicited email promotion back when the chaos of their downfall initially happened.
This refund phase looks awfully more and more like an attempt to get many people's credential instead of a real attempt to refund people.