Funds were stolen: a police report was filed by Paymium with BEFTI ( Brigade dEnquêtes sur les Fraudes aux Technologies de lInformation, a unit of the French "Police Judiciaire") and an investigation is in progress.
Do you have a case number please?
If several claims have been filed for the same url, we will process those claims on a case by case basis, under the presumption that the claim we received first belongs to the legitimate balance holder.
This seems wrong. If the attacker and the rightful owner both have the same 'secret URL' why would you think the first one to claim would be the rightful owner? It would be better to have people prove ownership by signing messages with addresses used to deposit to the wallet before the attack. If I can prove I both (a) know the secret URL and (b) control an address that deposited to the wallet before your security blunder then it's very likely my wallet.
I have asked the same questions repeatedly. He has ignored.
He will probably ignore you too. Definitely your first question...