Mermaids has said some service users could be identified by the emails in question, but denied intimate details were leaked