Name is one thing.
Credit card is another. If its his credit card well...
"Seven years worth of credit card and other payment transaction details are also part of the dump, going back to 2008. The data, which amounts to millions of payment transactions, includes names, street address, email address and amount paid, but not credit card numbers; instead it includes four digits for each transaction that may be the last four digits of the credit card or simply a transaction ID unique to each charge."
“Credit card is another. If its his credit card well...”
That is the only way to pay online....Some form of Credit card. So yea it’s him.