Well, he even said to take it for what it's worth (very little). I told him that a deal like that wouldn't surprise me at all and that it's an interesting story, but nothing more. Even if it's only a story, it's still worth talking about even from a "What if?" perspective.
Knowing how loose the computer security is at LFL (I know for a fact that they share passwords from time to time, especially when they're to lazy to get accounts for their contractors), it wouldn't surprise me at all if someone got into someone elses email using a "shared" password and found out the info.