Apparently, a crypto hunter was hired by the attacker in spite of the crypto stash not being disclosed by the owner. It doesn't seem to be any protection to keep crypto stash secret. Probably, the root cause of the problem lies in attacker attitude and enforcement agencies.