It can be, actually. Let's suppose that person is Marc, former PHF ADM, he's the one that once hacked our forum, managed to get on ALL accounts, and hack the forum after he have been demoted. Point in question, you could say, "he was ADM, he knows your password", but that's not accurate. PHF ADM powers are extremely limited, we'd had to change it by ourselves.
Thing is, SPPF and PHF uses the same vBulletin version. Except SPPF is more secure, but to someone hack PHF is already a huge thing, since the forum is quite safe as it is now, Dartz works on this daily. But I don't know if Marc would be that much capable. Besides, maybe he weren't the one to send me the emails, at all.
And it may not be from PHF, actually. But that person can pretty much be the same, just not who I thought it were. Considering of what he said, I could say it may be. I'll just know after you sent me the PM with his PMs though.