Nope, this site has not been hacked at all. (I checked and every single file on the server is exactly how it should be, nothing has been modified.)
So whatever emails he got were nothing to do with this site. Could be a virus or something on his computer.