They have his name, and where he studies, so they use the legal process (or Google) to get a list of his classes, and a list of the books used for those classes.
That doesn't seem particularly difficult for them to do. I doubt anyone would actually bother, but still, it's not tricky.