Makes me wonder if the recovery email the account had was the biggest metadata leak that actually confirmed the identity to that account. So much for owning your own account completely.