There is no guarantee that the guy actually stole his BTC. Many wallet stealers won't take the funds right away but will wait until a sizeable amount is transferred into the wallet before it cleans it out.
This is what I am talking about. There is 90% chance that he did stole btc from OP, but still 10% chance that he did not. There is no strong evidence.