[spinax]

The name on that email is not one of the Runbox folks listed on their About page, so one can only guess who that actually is or how the email was sent; it could have been a BCC for all we know. https://runbox.com/about/runbox-team/

[lrae]

I don't think they'd publish some random e-mail address of a random person.

Are we sure that isn't the address the extortion mail came from? Would make more sense?