Just found out about this today.
linkWhen you click it go to the first page (was in the middle of reading about it).
Anyway apparently all you do is call M$ and they give you anyone's account info. The person who took this guy's account wanted his recon armor. The real kicker aside from the lame security over at M$ is that they hung up on the kid after he told the customer service rep what happened.