"we also had one of his passwords."

Sorry, but you should not have your customers plaintext passwords, so very unprofessional.

Time to submit Empireflippers to plaintext offenders list?