You seem to be giving this even more thought than the ICO officer at this point. They did the bare minimum, which is send an email. This does not mean they are giving credibility to any of his complaints. Your response, as they stated, should be to the user in question and it should go something...