They gave him a month, he already has access to any of those emails, and will continue to - nothing to clean, in that sense.

In any case, it's not their stated reason. If they're sending emails using noreply already (which are bouncing), that's a completely different issue, and I wonder if he wouldn't have a case for them impersonating him :)

I find it unlikely that anyone cold emails "noreply".