The only sensitive information listed in this article is his application for security clearance. While that may contain a lot of personal information, that file would have been compiled and sent before he had access to classified documents, and before he had a government email address.

I am guessing this kid wiggled his way into a 10+ year old AOL account containing data that was never deleted. We all probably have emails and contacts sitting in a forgotten AOL account.