If it has only been 13 times, he's lucky. Don't go challenging criminals to screw you over and giving them a crucial piece of information.
Got what he deserved, especiall yconsidering he was fined for deceptive advertising because of crappy security.