The best person to ask is your daughter's BF; have you? All he would need is your name, account #, and password, things you might have laying around the house that anyone with access to the house could locate.
Call ATT and change the password, but also put a unique 4 digit passcode on the account. Oh, and tell him he owes you for the phone he ordered.