Unreal. One thing that strikes me about the Matt Honan event AND your own is that the ultimate basis for getting the access was a person-to-person event rather than a brute force password cracking or a further theft of info online or physical. Instead these thieves played on better nature/empathy of company folks to get what they needed. It's such a simple con from that perspective! All persuasion.

Sorry about your wallet, though! This is probably a silly question, but did the thief ever get caught?