It doesn't matter if he has steamguard on or not if he gave the user his email along with it.
If he did that then he's even more handicapped. (if that's possible)
BTW: Change the title to "I gave somebody the password to my steam account. (because i am stuped)"
You were not hacked.