He probably wanted to left a message in bitcoin transaction and sent those coins on hackers address but, that hacker donated that input to some other address. I think He's using latest bitcoin client or armory with coin control.