In fairness, his login name was probably public knowledge, most likely derivable from a system wide scheme imposed by the university computer dept, such as firstname, last initial @OKU.edu
Students are unlikely to get any discretion in choosing their login name , staff need to be able to email them and therefore work out their address easily.
Perhaps my memory is faulty, but wasn't the shared account a HOTMAIL account?