Sometimes pending transactions just fail ... orphaned block or glitch ... and get returned to the sender.  Have you looked at those possibilities?  It's good you notified them, but too soon to call it stealing, since you haven't given them much of a chance to resend.