[Ramius]

What needs to happen is the IP address of her office/computer needs to be searched at all the free Email hosting companies and find all the Email addresses used by her/office. If found then all the Emails and who they were with can be found too.

Not with NAT-ed addresses they won't. Not likely.

[DB]

The IP address may well be office wide and not each individual computer but it still hugely narrows down all the Email addresses connected to that office. Many can be eliminated once found leaving Lerners. Then after that, it would have likely been Web mail which uses a browser to access. Browsers often leaves a unique signature that the Webmail hosting company would have logged.

So much more likely than you might think.