Write a script to send him email...that looks like it came from himself. Make it say "Your security has been compromised."

Fairly simple with php or something lol