Possibility of vbulletin leaking user email addresses?

[tobias_t]

Hi there,

We have a forum user complaining that an email account that he created exclusively for his forum account is suddenly receiving spam. He is now accusing us of leaking email addresses (which we of course don't do).

Is there any chance that email addresses can be harvested from vbulletin forum accounts through some kind of exploit? We are currently runnning 3.6.5, and ran 3.6.3 for quite some time before that.

Thanks for any help, Tobias