From the evidence it seems that the hacker knows his real identity. The hacker gained access to Satoshi's "real" gmx email address which then had his satoshin@gmx address as an alias. If this is true the real Satoshi Nakomoto's identity will be soon revealed. We have been able to cross reference the purchase order to a bitcoin talk thread https://bitcointalk.org/index.php?topic=193129.0 around the exact date so the email looks legitimate.