Ok. Before he thinks about getting the account back, he must find out how they got access to the account originally. If he doesnt, then theres no point getting the account back as they will just get straight back in.
Onc ehe has found out how they got in and fixed the point of entry, then he can submit a support ticket and get his account back.