The suspect worked in some unnamed crypto exchange based in Britain as tech support worker. He was targeting accounts of inactive users without 2FA installed, he was changing or adding recovery emails to those accounts, which allowed him to reset passwords and steal all user balance. The police estimates that he stole 720,000 UAH this way (~26,000 USD). The suspect was spending stolen money on gambling.
This should be yet another reminder to never store coins online for long term, and always use strong 2FA on your account and your email.
He was so stupid that he thought he will get away from stealing from his own company, i am not sure what he was thinking that he could get away from stealing from inactive users.

he just ruined his career and life for his gambling addiction i suppose as he spent the stolen money for gambling. Always secure your coins and always use the second factor authentication at all time and never store your coins anywhere without you having the private key