My friend got hacked

My friend was hacked. I think it was due to a data leak from Riot because his email address was changed, without even receiving a confirmation email. His Riot account was changed so he can no longer log in or create a ticket because of the changed address. I have the hacked account as a friend on my account. He has all the payments for the skins he bought on his account for proof.