Hacked account for sure. The reason he doesn't want you to change the skin is because then the real owner will realise something is wrong. These sorts are from the kind of register/login servers where all the passwords are stored in plaintext somewhere.

Supplier? Doubtful. 50% sure this is a facade and there isn't one.