You would have to hack the exchange.
Or you would have to get the Government involved so that they will confiscate the user database and conveniently hand it over to you

I personally don't think the second one is an option, so happy hacking
However, sometimes you can identify addresses by their exchange if they use a prefix.
For example like this:
"3BMEXqGpG4FxBA1KWhRFufXfSTRgzfDBhJ",
"3BMEXKjhrEtLUaBHMbowXuFfyRzo832dU9",
"3BMEXxSMT2b2kvsnC4Q35d2kKJZ4u9bSLh",
"3BMEXqkYPg7Kf3CTTpedfZZsGjrGCJ38T2",
"3BMEXMEvNLdpvoJLCHrCSJ8eiV4GRv76Tu",
"3BMEXaw5X8EScdxZZJNLaM9ZHXAzfwZhDp",
"3BMEXBcaWfTHsA5f53vM2CRBi33G57C6PR",
These are exchange addresses but it's not going to help you any further.
so IF I identify that from which exchange I had bought this BTC and they are still in that wallet address, I can connect them with my only email which I been using since years to request them to allow me access the wallet.