The Sofer Defendants wrote and deleted the email after the lawsuit was filed, so there was no question that their duty to preserve had already attached to that email.
Some users who received the email noticed that some of their tweets had been deleted, while others said spam links had been posted without their knowledge - a typical characteristic of a compromised account.
However, its terms of use acknowledge that "residual copies of email may remain on our systems, even after you have deleted them from your mailbox or after the termination of your account".