@sho- the problem with that theory is that candy sent me a PM saying to give me a "second" before he would send me a PM at roughly 27 seconds past the hour and did not send the PM from the other account until roughly 10 minutes past the hour.

This is evidence that it is more likely that candy contacted the OP or the "main" account of the OP in order for them to confirm ownership of the account.

I would say that it is most likely that candy was working with the owner of both the OP and of convicted2008 to try to fake their account being hacked.