Once they had it traced to his household, it was pretty much game over though. Even if they didn't have technical means to determine which family member was usi

Once they had it traced to his household, it was pretty much game over though. Even if they didn't have technical means to determine which family member was using it, I'm sure they could find others. Using just the information that he used VPN Product A, and the extortionist used VPN Product A doesn't mean anything without other information, and they wouldn't have even found the information that he connected to VPN Product A without having a reason to look into him specifically (vs. any other customer of VPN Product A).