The only people who were pervy to/had access to the customer's account are both owners of PvM Justice and no one else was given this information has been disclosed to anyone else on their part. The customer, however, had previously that he has his information shared with an "irl" friend outside the server that "hops on" when the account is free to play ToA himself, and he has only recounted this claim once the "scam" took place. This friend was later found out to be someone who knows the server owners personally irl and not the customer's actual real life friend, but more likely a culprit that pushed him onto making this move to claim he had been hacked only to be refunded money he had actually lost staking.
Proof of customer admitting to having his friend hop on to play and later recounting, also the reason 2 workers were on his ticket was him requesting someone else to get on when his friend isn't:
https://cdn.discordapp.com/attachments/803965432516182036/1030541973964214403/unknown-11.png
https://cdn.discordapp.com/attachments/850942223575285770/1030487865567748096/unknown.png
The customer was only kicked out when it came to light that he had previously "joked" about his account being scammed prior, not sure if attempting to pull the same trick or if it's funny to claim you've been hacked then say jk afterwards. Either way, the staff team at PvM Justice PvM wanted nothing to do with this shady behaviour and told the customer to make a sythe report and kicked him for that specific reason.
Proof of customer joking about his account getting hacked prior to "scam":
https://cdn.discordapp.com/attachments/803965432516182036/1030542159327268915/IMG_4680.png
https://cdn.discordapp.com/attachments/803965432516182036/1030542196685934632/IMG_4681.png
For the cherry on top, the customer's account was logged into and neither owner could get on, when he was pinged in his ticket to be asked to indicate when the account would be free to for them to play on, he didn't respond, later claiming to have been asleep when the incident took place and that it was not him on the account, however, screenshots provided the day of, by his "friend" as he was screensotting his chat showing him joking about being hacked, show him sending a message to said person during the same time period where he claimed to be asleep and unaware of any occurances.
Proof of customer messaging his friend @3:04 PM but unresponsive to pings in his ticket @3:22 PM:
https://cdn.discordapp.com/attachments/850942223575285770/1030487865567748096/unknown.png
https://cdn.discordapp.com/attachments/889592619229917215/1030632795791429672/IMG_8712.png
Furthermore, next day there is more proof of customer admitting to someone else he had just lost lots of money staking to a member of a stake server, where it's unlikely he had spare money to lose other than what he had in his bank; instead, the more likely scenario is he staked his bank like he did prior when he joked about being scammed instead of outright mentioning he has staked, was in the process of buying more again, as mentioned to the friend sharing his account, and decided to claim scam to get the money back, not caring how his actions affected others in the process.
Proof:
https://cdn.discordapp.com/attachments/889592619229917215/1030638192707244072/unknown.png
All in all, the conclusion reached through very telling screenshots acquired showing the customer is actually a staker who had lost his bank and was going to "buying mills" on his main account where he had nothing to lose from staking his bank (as in it's not effort on an ironman wasted) and can easily claim the money back from any service provider, in this case, server owners who have everything to lose and nothing to gain from scamming 1.3B off of a customer.
