Yes, I'd delete it with no problem - i'm not holding data users contributed to my site as hostage.
I'd just check before deleting if ip adress from which request is made matches previous logins - deleting all the work user contributed to forum, just because some troll hacked his account would suck.