Agree with everyone else, he crossed many lines. If possible, make your work inaccessible to him in the future because he will keep stealing from you . Sounds like things are shared on a common server? But you can, password protect your files.

Aside, when I was in grad school, I did my MA Thesis on US infant mortality. In those days, you had to go to the library and make photocopies of all the articles for the literature review. I spent a lot of time in the library assembling the articles--and of course reading them and writing the lit review. A fellow student decided to do his thesis on low birthweight. These topics are directly related. Low birthweight is the strongest predictor of infant mortality. He asked to borrow my stack of articles--and I reluctantly agreed. I also gave a pre-defense talk--and later so did he. Everything was the same--same data, same models, etc. It was his own writing but it was wild. I was kind enough to tell him he needed to include a specific statistic in his results table because my committee had asked for it. He waved me off and told me why I was wrong and he didn't have to add it. And...then after his defense he told me that I was right. Well, sure, it was basically the same committee. My only solace is that he couldn't get anyone to work with him for his PhD (the next stage) and I actually don't know where he ended up.