Can be anything he might be working at institution or have a friend or relatives who have access to bucket. Or he found a secret form to upload in bucket.Also yesterday i realised that. lot of news site edu sites using this bucket.
this bucket subdomain has lot of backlinks .
but how he do that cant understand ?