I don't buy that story it smells manufactured.
Nobody who's phishin for info will be dumb enough to give his account info to an unknown user online. Plus any retard knows the staff won't need more information than username to find out everything about your account.
It's a nice try but most likely another urban legend in the makes.