Not sure if I’m reading this right but what makes the data set interesting is the attacker used a known email address list to get associated twitter ID.

The scraped public data is only interesting if the email address identifies the victim and the public content compromise the victim in some way.

As far as not noticing scraping of the accounts:

If all that is needed to scrape public twitter data is the twitter ID, the site is likely being scraped constantly.