Alternatively, if this hacker had a method different than what he/she described to obtain the necessary information, it would make sense that he/she would describe a false sequence of events in order to throw the account holder off the trail.