In the context of Twitter's actions and explanation, it doesn't matter. They aren't trying to ascertain the authenticity. Note the policy is against both hacking and doxxing and this story is doxxing regardless of how the emails were obtained.