he probably entered his info into a fake page which sent it to someone elses inbox. and then they just signed in with all his info.

idk i dont see it so much as hacking as much as it is trickary