It sounds like someone, of a dubious nature, hijacked your brother's computer.
And by doing so obtaining your email address, and anyone else for that matter, would be relatively easy.
Your bro's computer may very well be at risk. He needs to straighten that our, pronto.