Are there more to email addresses that were leaked? how do we know they did not?