If he knows the gamertag, they can look it up with that. But they do have to have the name, phone and address that was on file.
After that, to provide the id, has to be able to answer the secret question and/or the last four digits of any credit or debit card ever on file.
Good luck!