Well, i hope that the wallet owner was able to request the bounty manager to replace his private keys by replacing new wallet address as there is no way that the private keys will be replace that if someone notice it then absolutely stealing will take effect immediately at the time their private keys was exposed in the spreadsheet. If ever this will happen to anyone you should abandon your account immediately and transfer you available token to your new wallet and avoid doing the same mistake.