I still don't see the problem. If this handle was directly connected with $x I would fully expect people to be discussing my handle in blogs/forums. Going to the cops is fine and dandy too of course.
Krebs even clarifies "If Zu wasn’t involved in the hack, he almost certainly knows who was.".
So I'm 85% sure that ${User} is connected to a CP ring in some way.
Should I publicly out ${User} even though I could be wrong and let them suffer the ramifications that it causes?
If they lose their job, spouse, shunned by family, receive death threats, and have an internet hate mob trying to find where they live because the evidence was "leaning towards them" does that make it okay for me to call them out as being connected?
"Oops, I was wrong. They aren't connected after all." doesn't fix ${User}'s life. Even if it opens up a defamation lawsuit, it won't fix their life - and the lawsuit will be expensive - and even when they win they'll hardly see any money because I'm some nobody who doesn't have any money for them to sue for to begin with.
Do you still not see the problem?
Edit:
Not to mention I may not even be in their country.
Krebs even clarifies "If Zu wasn’t involved in the hack, he almost certainly knows who was.".