[CaptainMorgan]

He got your email because he has your laptop - same for the backup software. Depending on how valuable your information is consider a sizable monetary amount to get the name of the person he bought it from or just offer more than the laptop's value to get it back and end it. Consider reporting to the police what you're doing... if a physical/in-person exchange of the information occurs and he didn't take you up on your offer, the police might be able to legally influence the buyer into giving up the details of the seller/thief since the buyer committed a crime too.

Good luck.

[cubicle67]

To expand; System Preferences > Time Machine will tell you time of last backup, date of oldest backup, etc. You email address will be in the Account settings of Mail (Preferences > Accounts)

Also available are - your home address and phone number (in Address Book, he'll already know your name from Mail), saved passwords in FireFox (stored as plain text), iTunes account if you've set it to save your password, and websites where you've set 'Remember Me' (GMail and the like) etc

Luckily for you this person seems to have some degree of respect for your data, and hopefully your privacy. If you're not happy with their access to this, it seems they have more leverage over you than you do over them.

Protip: In OSX you can set it to require login password after a certain timeout, eg 1 hour. It's under System Preferences > Security > General

[kabuks]

That's what's puzzling to me. I have it set require login everytime it sleeps. Somehow this guy got passed this