On a non-AG related matter, for that to happen, the hacker would need your friend's email account, and email password, so it's probably wise to tell your friend to look into that as well...., change the compromised email password, scan the computer for key loggers, etc....
Yes, please e-mail me about this at Ferret@ArmorGames.com and be sure to include information about what happened and the username of the account. Also, your friend should be the one e-mailing me.
