It looks like the last time the account was active prior to the forum hack was April 24, 2015, then the forum got hacked on May 21, 2015, then the account was active again on June 4, 2015.
Unfortunately the password log (the public one) does not go back that far, however there are three recent password changes ~2 weeks ago, one on June 27, one on June 28 and one on June 29, 2015. The first post since the June 4 post was after the last password change on June 29. I would conclude this to mean that the first password change was someone changing the password and giving it to an escrow, the second one was the escrow changing the password again and providing it to the buyer, and the June 29 password change was the buyer changing it from what the escrow provided to his own password.
If the account was really hacked or not is anyone's guess, although the presence of a signed message that the buyer has should be proof that the owner was the one who sold it. Unfortunately many people do not know to ask for a signed message, so even if it was the owner who sold the account, there may not be a signed message confirming the trade.
Hmm, have you seen any precedent to this?
Do the admins support someone who can prove that they have bought the account over someone who can prove that they originally owned the account?
I know that they are okay with account transfers, but I don't know to what extent they enforce account transfers.
Do you have any experience with admins stepping in and helping an account buyer over the original account owner?
