Did you read their announcements at all? The hackers managed to log in to accounts from stolen passwords from previous hacks. Fortunately they discovered that before releasing the wallets. If they had released them, the hackers would log in again and simply send the tokens to their wallets and sell them.
Well that is what I am saying the hackers had nothing to steal luckily. There is only one entity that can be accused of theft at this moment and we all know who that is..