Fair enough. I commented as I did because so far, all the stories/reports I've seen mentioned only email addresses as a way to identify users. The only searchable DB I saw where using email address.

I knew CC information were leaked as well but I didn't know there were searchable DB for these as well.