Had the same thought. But I guess the hacker had already proved he could get into his accounts so that might not have been a big deal to him.