In the ACP there should be an option to delete all unread PMs by a specific user to be used after a PM spam attack.
Fixed and live.