[...]
Regarding the suggestion to send an email to users, this is clearly the most effective way to resolve this issue. However, as we mentioned in our initial statement, we do not have access to the database. We do have a limited version of the database that is shared with regulators for compliance purposes. If we had access to the actual site database, we would simply restore the site and allow users to withdraw their funds directly. Unfortunately, this is not the case, and we can only do what we can with the resources available to us.
No, you said you you manage to successfully retrieve a backup of your database. No mention of limited version
[1]. Two things that might be interesting to point out; One, did you imply that the irresponsible person who stole your database has your customer's email addresses, and you somehow still couldn't get your hand into it although this is now a court case? If we have to exhaust every option [since you're trying your best to refund] I believe a court-appointed entity can get a hand into the database and blast an email announcing this, especially since the aim here is to make your customer whole again. And two, how will you confirm the required submission entries you propose
[2], if you don't have that very database to match them up?
[1]
Fortunately, we have successfully retrieved a backup of our database and are working with regulators to develop a plan for fully refunding all users. This plan will be announced in the coming days.
[2]
1. First name, Last name (if you are KYC verified)
2. Username (request will be ignored if the username does not exist)
3. Email address (request will be ignored if the email does not match)
4. Refund Amount (approximate balance is acceptable)
5. Wallet address (we will process only in the cryptocurrency you have)