Couldn't you have made a throwaway email address? Plus, connect through a VPN just in case they refer the case to the authorities.

It'd be ironic if they threw more resources at finding the "hacker" than at securing their network...