For future reference, if this happens to anyone else go to the link below and follow the instructions listed.
http://support.steampowered.com/kb_article…=2347-QDFN-4366
As a security measure you might want to remove his admin access to the servers until he gets the account back.