That's absolutely brutal.

I imagine it was an inside job but who knows.

That's why I keep my private keys in my own possession.