Nevermind - he claims to have addresses. Either he's lying or this is a different breach.