It's patently obvious how he knows it.
Someone is sharing those details with him. Either via username and password that allows him to login to see those details or by someone who has access sharing them with him.
Dodgy people roaming all over the place. Why would it be any different here?
Recommended Posts