He never was signed in on any other computer than the one he was using while it happened. Sounds like it’s a family member? It’s not. There’s no trace of the hacker except for the high robux purchases done without his knowledge. He didn’t press any suspicious links lately or send anybody any of his personal information lately either. Here’s the issue: His second step verification code was not triggered, nor did he receive an email for a new login.
Thankfully he recovered his account, but it happened while he was online, so if he wasn’t it most likely would have been the end for his account. He still does not know how he was hacked. Recently, one of my developer friends had is account hacked into and his robux drained without him getting any notification.