teh classic "pin the blame on a problem user(s)" trick
Conan and I saved the bricks and checked the ID, which turned out to actually be Darren's ID (7893)
It is possibly a compromised key though.
On second thought, I'm pretty sure it's possible to change brick ownership with eval, and whoever forgeted the server had access to such a thing so...