If you have a mailbox and only the 10 worst emails are fake.

Then the entire hack should be considered fake too.