In other areas where Moodle searches for users, the fullname and email fields are searched. I also think that the username field should be searched. To be consistent, I think that when searching for users within the messaging system, the email field should also be checked.