No, it's not being split into many different addresses... three UTXOs are being combined and sent to one address: bc1q9slt8tfwfp33sn8gul0jmcpemq85pxh2csje6j
It confuses me why if this were being stolen, they would transfer 0.249 btc to me before stealing the balance
Indeed... also... why would any thief only take 0.01 and leave all the rest... only to send another transaction later that takes everything? It certainly doesn't look like the 'normal' sequence of someones wallet being emptied by a thief!

These transactions occurred just over a month ago... are you 110% sure that you didn't make them?
