Check your logs and see what exactly he did with his membership.
Chances are, unless you have it blocked, he just unleashed a bot that downloaded your entire members section and then canceled/requested a refund. Happened to us when we had a pay site, and then we set it up where bots were blocked. My guess is the guy did that to you. I could be wrong, but figured I'd pass it on as a possibility.
