He gave you the account so I doubt legal action can be taken still it isn't the most ethical or moral thing to snatch someones account like this. I'd advise giving it back as it's not really a nice thing to do.