Or you would have to get the Government involved so that they will confiscate the user database and conveniently hand it over to you
I personally don't think the second one is an option, so happy hacking
However, sometimes you can identify addresses by their exchange if they use a prefix.
For example like this:
"3BMEXKjhrEtLUaBHMbowXuFfyRzo832dU9",
"3BMEXxSMT2b2kvsnC4Q35d2kKJZ4u9bSLh",
"3BMEXqkYPg7Kf3CTTpedfZZsGjrGCJ38T2",
"3BMEXMEvNLdpvoJLCHrCSJ8eiV4GRv76Tu",
"3BMEXaw5X8EScdxZZJNLaM9ZHXAzfwZhDp",
"3BMEXBcaWfTHsA5f53vM2CRBi33G57C6PR",
These are exchange addresses but it's not going to help you any further.