Anyone have a samsung galaxy s4 (or similar prob has the same setup)? Do you know recall if your msgs from prior to getting the phone were accessible on it?

Basically mr. Bird got a new phone early may and it was stolen yesterday, he didn't have a password or any security apps on it. His previous phone was also android. It's been deactivated, but can't be remotely wiped because it wasn't set up ahead of time. I'm trying to see how bad this is, I know on his previous phone there were msgs that included SS #s, I think even a credit card of mine. That phone was locked. Other than awkward personal stuff, there hadn't been any msgs that anyone could really cause problems with for me on the new phone unless they can access the old msgs. Anyone know if that's possible? I know on my iPhone it is, but I don't know much about androids. The CS lady from sprint didn't know.