You keep your passwords when they can be butt dialed? Good to know - if I were an identity thief.
He screwed up. Not going to hassle him about it - everyone has done something similar, be it putting a password in a username field or hitting reply all instead of reply.