Quote - ... RPublishing is actually just another vendor.

That's not the case, RPublishing is Renderosity's subsiduary for buying content from those artists who don't want to broker.
It has the same office address, is hosted by Bondware, and is run by someone who is a Renderosity admin. So it's pretty clear how they came by special access to Renderosity's customer info.