Theymos confirmed that the satoshin@gmx.com address was compromised over four years ago, after he received this email from it
 
He (Theymos) suggests in that thread that the GMX address may have expired and been re registered, but there's no evidence to suggest that that's possible. I've had many GMX addresses over the years and don't think it is.

That was also the registered access address for the P2pfoundation account which Satoshi used and where the OMG what does it mean???
message was posted on 29th November.
The only marginally interesting aspect for me is that was where the " I am not Dorian Nakamoto" post was made, so it must have come from the hacker.
Someone ask Prof Faustus, he should know.....