That is a serious crime and you can, if you wish, make a police report and have him prosecuted for felony missuse of a password. He can face an enormous fine and many years in prison under the state statute. He may also have violated federal law as well.
