It would be interesting to know a little more about the process for creating the public / private keys.

It could be that the thief is an insider, or that someone has figured out how to attack a number generator for a particular connected chain.