yeah he posted a couple lists of accounts in global chat...
edit: His site is custom-coders.com and he sells an account bruceforcing program there.
All the passwords on his account lists are like 12345, password, 123456, etc. There is little proof that he actually hacked them, moreso he bruteforced them.
He tells us that the SRO db is at /home/sro/blahblah. This is so false because MySQL dbs won't be placed in a place like that and MySQL connections most likely cannot be made publicly.
In conclusion, this guy is a fake and you should just have strong passwords.