Yeah Hush is not safe now, and probably never was. Hush put the e-mails on cds and delivered them to the DEA. Seems logical that this would have been a major part of most of the busts. Prolly going a little over board with this statement, but if you ordered from any of the sources that got busted using hushmail good chance le has your email address, shipping addy, and knows how you paid.
check out anthony-roberts blog he wrote up about this also. It was a simply as getting e-mails and tracing greendot cards back to him. Scary shit...