Sort:  

well, it was just a bad copy and paste - his private key was sent in the transaction memo

hopefully no one takes advantage of it and that person is not harmed

They would only able to read his encrypted messages if the compromised account ever sent/received any.