The hacker didn't return all the funds, he still holds 8.3M NXT https://nxtblocks.info/#section/accountId/NXT-8WJ7-8A2H-MBYN-3W9K4
Also, I think it's worth mentioning, that the hacker got a ransom for NXT, he didn't return NXT voluntarily.