1ERszMSERwHNR9Xty73KZXpsg1jjBXWcHh received 2 large payments well after the "farm was stolen", though its origin is unclear.
1K7AuMJwVfZg3UVjinnjT2HzG4pJvACat6 is still receiving relatively small amounts from ghash.
Either way, its totally unacceptable that AM and AMhash didnt make this public when it happened, if indeed it even happened.