If you take the screenshot showing the leaked e-mail from an order 'he' placed at CardReaderFactory, you get an interesting data point:
- You can lookup orders tied to the e-mail address shatoshin@gmx.de - You cannot lookup order tied to gibberish accounts, like odn2n489n4@gmail.com
Proof: http://imgur.com/a/22z72