The fact that he's worried about it makes me think what he was doing in the early hours of the night

If you receive such black emails, the first thing you should do is change passwords of your account on another device if you have.

However, remember this step does not truly help you because if you do it on your compromised devices, it does not make much sense. It is a very first step to prevent them attack your accounts immediately. So your new passwords should be wipen out later when you completely clear your devices.

How to clear your devices? Install good AV softwares. Scan all drives.

After scanning process, and delete all threats are detected, the next important step is install your operating system.

After installation finishes, rescan your devices with AV softwares again.

Last step is to change all your passwords again (no replicated formats, templates). Totally new passwords.

[GUIDE] How to Create a Strong/Secure Password

---

I agree with Jet Cash that I don't read emails from strange addresses.

This is just a generic extortion email sent by crooks to scare you into sending them BTC. They didn't actually hack anything, and even the email address of the sender is a fake email and not actually hacked.

They really did get your old password but only .because it was in a database leaked a while ago. It doesn't even have to be your bitcointalk password, it could be the passaord of any service that was breahed, and they just scrape all the email addresses in the database that has passwords in them and send them this extortion email.

They just assume everyone in the database watches porn and is vulnerable to thinking that someone else spied on them. They made an extortion campaign like that in 2018 and made off with hundreds of thousands of dollars but this present heist has been lackluster, and people don't seem to be falling for it this time around.

There is even an extortion campaign threatening to give you coronavirus: https://www.welivesecurity.com/2020/04/17/scams-lies-coronavirus/ apparently the crooks are desparate for money but even the most dim-witted victims don't believe someonw on the internet can come to them in real life and infect rhem

@OcTradism, none of these steps are actually necessay because OP wasn't infected today or recently, they did not steal the current password either, so there is nothing to worry about.

There is a thread on the forum that takes about password spraying and maybe, this generic message could also be sent in that order. It could have been sprayed on varying emails and await some potential victim to comply.
Probably they got your password through what ever means as they've always had some way but then, it's a warning upon you now to carefully check your activities properly not to be a victim of phishing platforms.
And one thing I know and believe strongly is that, giving in to blackmails supposing it's true doesn't make it go away. It's either you become an office always ready to supply to your blackmailer and in due time, the publicity of what you intend to hide would go out.
So why the heck should you comply...?

Consider it a PSA. If you're still using that particular password anywhere - you should change it. Other than that the "hacker" has nothing on you. I wouldn't go changing every other password because that may cause more trouble than it's worth.

Just don't be afraid of these kind of blackmail even if they got your video and accessed your account will not cause you any trouble unless you are a public figure/celebrity.But next time you should be careful when clicking any links, normally these kind of attacks were happening on skype video calls now they also got evolved.

They may have send this type of mail to many people and asking for the money. These people keep doing such attempts to collect money and they are successful too. Some may send money to these scammers which make them feel that this is an easy way to get money out of people's pocket. People needs to be educated and understand what the hacker can or cannot do with the information he has.

If someone was actually blackmailing you, they'd show you the blackmailing materials immediately instead of saying "yeah I totally have it, don't even try to ask for proof". They'd also refer to you by your name, though this alone is not enough, cause many people have public profiles with their real names, and during database breaches this info gets stolen. Even if you will receive a real blackmailing email, it's better to contact authorities rather than immediately complying with criminal's demands.

Delete and forget. It goes around for some time already, I received it too. Some old (non-porn) database was hacked and the hackers use it to blackmail people with those chain emails.