This is very sad to hear. More so for the owners of raided coins.
If there was a leak of private keys somewhere in the production process the manufacturer should know the name of the people involved.
So if an investigation is ongoing no much info can be publicly released. Over time hope some names surface, we know who did it in Coinographic's case.
Richard was apparently the only one with access to private keys, so he stole them himself, or he is flat out lying.