The other possibility is that his PC has picked up a virus or trojan that is silently sending out email messages to people in his address book which would explain why you both received these emails. He should really scan his computer with an anti virus program in case that has happened.