Keylogged somehow?

[Woz]

2 minutes ago, Maldesto said:

That isn't how it works if the password wasn't changed. Basically he probably used an old password and the same name/email that he used to register a website and that database was leaked.

True. Good catch.