His address book was stolen too
He went to someplace like facebook (dont know if its true with facebook, probably isn't)
and everyone in his book gets spam. Some sites actually steal the names in your address book
Not quite the same as spoofing, but not sent from his computer
Happy Holidays my friend.