Someone hacked into my BFs Google drive, and uploaded a bunch of porn. I found their Twitter. What do I do now?

My boyfriend (17/m) and I (16/f) have been dating for almost a year, and have spent longer than that together overall. We agreed a long time ago to not watch porn and not associate with social media accounts (friends or not) that primarily post sexual content. This has worked well for us thus far.

Today, however, I was searching something on Google on my boyfriend’s phone, and there was an OnlyFans in his recent searches. I looked more into it, and despite being upset, we believe we’ve found the source of the issue. My bf can’t access the email that his google account is connected to. He has his password saved, and always has, but it has been changed. We looked through his google drive, and there was porn of a popular influencer uploaded to it.

Now there is two places that porn has been looked at or uploaded.

We checked to see who had uploaded those pictures to the google drive, and lo and behold, it was another user, not my boyfriend. We assume this is the person who also changed the password.

We have no idea who this is, but their email also happens to be their twitter username. We found them on social media, and have not done anything yet.

We’re primarily concerned with the security of the account and how to regain it. While I’d love to shame him in Twitter DM’s for what he’s been secretly uploading, and confront him, I don’t know if that’s the best tactic.

Any advice on how to proceed? We want the email back, and advice on how to deal with this person (if we even have to).