This is ridiculous why would he put his keys into some shit evernote? its clearly his fault ! he is careless to put those delicate keys into some shit note app.He is too confident too because his email doesnt have any 2fa enabled,which is why the hacker cracked his email addresss without him knowing that his email address was compromised already.