Nobody on this forum provided any kind of verification that they own the private key. It is way more likely that a rogue doctor sells certificates to unvaccinated people (which we know happens) than that the private key leaked, so let's not jump into conclusions here.