Yes it looks like he did, however after the update to the latest version of WordPress, i rescanned with SiteLock and the scan found no malware (presuming it was taken care of).
I hate people who do this kind of thing, although it is fascinating at the same time.