A third party using a real government email domain walked off with identity documents and full bitcoin transaction records.