brokaddr - 8:35 am on Mar 14, 2012 (gmt 0)
Did he contact them via one of the methods he had previously registered with them (such as an email/phone number)?
If not, the company did the right thing by not disclosing an order history.
Order histories should only be made available to the person who made those orders and can confirm their identity as such.
However, any persons contacting a company via a confirmed/registered method and the company does not disclose, that is very weird. I'd be interested to hear the reason behind their decision.