Its more likely that a hacker came in using his name, with a name script...