They should be able to correlate IP addresses that access the email over time, specifically those overseas and those from their house.