it doesn't make sense that they hacked GPZ and then sent emails from [email protected]. I mean it's soo easy to spoof email addresses why not write something more convincing.
With that said, I'm probably one of the guys that got their info jacked from GPZ.