Sort:  

I would also like to know how it happened. For having both account and recovery account hacked with the general password, I think that either his phone or his computer were accessed directly.