The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses