I got one of these mails when my vpn dropped for something like 6 seconds (they even send your the timestamps). I wouldn't be surprised if they are seeding their own copyrighted work to figure out who's uploading. Once they get the IPs they simply have to ask the ISP for the name/address of the IP owner at that time.
Anyway, however they are doing it they seem to be very good at it.