ALL of his online credentials could be hacked only if they were all stored in the same place ... could you find out WHERE they were stored and let us know ... otherwise, generic, a “someone had everything hacked” isn’t very helpful ...
“ALL of his online credentials could be hacked only if they were all stored in the same place.”
Unfortunately that is not true anymore. They are being collected AS YOU ENTER THEM.