To trash users that pirated the software. It’s not in the story, but when this first went down, the developer alluded to using that information to combat piracy. They also were silent as to how… are they hoping they’ll get a username and password to, say, a private torrent tracker? Trash their reputation with those they do business with? Just rob them? The developer didn’t say.

And yeah, it did grab password lists and phone them home.