I wonder how easy it is for people to open an account under a false name.
Anyone can use a false name on the internet but getting a credit card under a false name. That can not be easily done.
It would appear they are looking at credit card transactions/address in this. They did not just hack the email you know.