How do you know mtgox database was compromised?

What do you think is more probable: mtgox db compromised or a trojan in your machine?

If you move such quantities of money through mtgox why do you not use 2 factor auth?