[berberous]

Since this info has posted both here and on Reddit: the name/address is easily recoverable. Address doesn't show up on Google, name doesn't match anybody obvious. Payment type for the FGPA that was ordered was 'cash'. I'd bet this was just a fake order somebody placed, and the company never did an e-mail validation.

[Cybershambles]

So we're looking at the gmx.com account being legitimately hacked -- but Satoshi had good enough opsec to not leak anything interesting from the account.

The hacker gained access to the gmx.com mailbox - resets all of the third party accounts and still comes out with nothing of value?!!

1) So he has to fake an invoice to gain media buzz? I don't buy it.

2) What's in the outbox?

[berberous]

1) I don't think he faked it. I bet he thought it was real, but someone just used Satoshi's email when entering a fake order in 2013, the same way I occasionally use "[e-mail]" when creating a useless account.

2) Apparently real e-mails. He has re-forwarded some from 2011 to the original recipients, who have confirmed.

So possibly there's more of value in that account, but doubtful Satoshi's name/address. The hacker just saw the fake order and thought he got lucky.

[Cybershambles]

Nods. Makes sense.