I didn't see that they had the full email (http://www.businessinsider.com/google-bonus-and-raise-2010-1...).

In that case, that person wasn't very careful. One easy way to identify people would be to fingerprint each email by permuting words and sentences here and there. You don't need that many to make each email unique. That would actually seem very Google-esque to do that :)

But I'd be curious to know if there is a simpler version: sniffed traffic, browser history, Sent folder...