I tried sending a message to their contact email PGP-encrypted to their public key, asking them for a PGP-signed confirmation. And it came back: 550 5.1.1 <con

I tried sending a message to their contact email PGP-encrypted to their public key, asking them for a PGP-signed confirmation. And it came back: 550 5.1.1 <contact@truecrypt.org>: Recipient address rejected: User unknown in local If they got hacked, it's not just their sourceforge account.