That's my first thought. The only way I could think of that happening is if he was on some Peer to Peer system, like Torrent, and actively trading, or if he was set up as a server. Otherwise, I think they would have had to hack his computer.
“The only way I could think of that happening is if he was on some Peer to Peer system,”
I’ve been following this on other sites. I don’t know what “peer to peer” means but I’ve heard them say he had it and that he was using it. That and a Lenox partition.