Random User w/ SQL Injection appears the most probable.  Answers the obvious question of why the hell would anyone keep 500,000 BTC on mtgox: they wouldn't.  the "BTC" were likely created out of thin air via malicious SQL statement.