Given that COdbaUA bases its security on a four digit pin, instead of a longer password like pmua (indeed, IME, reservations don't ticket unless the pin is used), this is not surprising. As to what to do with the info, contact the police with jurisdiction over the area where the home in NJ is. Unfortunately you live in CA and cannot therefore legally record the conversation when they most likely tell you to pound sand. But the right thing is to try.