I've added a few of the attackers addresses to the post, you can look them and the balance up on the block explorer, from what I see there are at least 300 more such addresses which would need to be all verified to make sure it's him...

From what I see many tx'es are already sent somewhere.. Exchanges ?