The coins that are now at this address belonged to a guy who used his email address as the label for his primary receiving address.  I've contacted him and he is in full panicmode (not a native English speaker, so I don't think the "I have your coins, they are safe" part got through completely).  So these coins at least are accounted for.

I'm just doing what I would want someone else to do if my wallet were stolen.