A firm that sells deanonymisation just handed out the names and emails of the people who buy it. I read that as the more damaging half of the story. Those addresses belong to exchange investigators and agency analysts, so every one is now a phishing target with an employer attached. Names plus employer is often all a convincing spear-phish needs.