Well I emailed him and supposedly a friend of his at his school got on his computer and started sending spam+porn stuff on this and his IGN board account. Not only that, but he sent some crap emails to his GF too. Wow what a friend indeed.
Anyway, that will teach him to keep passwords stored in his browser, or have his accounts stay logged on indefinately (via cookies).