If it was me, I would file Form 14039-B with box 1 in Section A marked and let the IRS figure it out. Even if it wasn't intentional, it's still a theft, or at least a misuse, of your identity. Section D is there for you to provide explanation.
steamed_fish, it sounds fishy to me that they would ask for two addresses or or for a name other than your friend's. Only one name and one address is needed to obtain an EIN.
