The sender, owner of the 0x587ecf600d304f831201c30ea0845118dd57516e address, is a Korean company made a mistake and set the gas fee too high (don't know how this happened).
They contacted Sparkpool and confirmed they are the owner of that address and asked for refund.
They came to an agreement to split it and each one gets 1050ETH.
This is the input data in a transaction from the victim:
https://etherscan.io/tx/0x7b53c4f08f59d2218c20a05069cb99914cacb8d57ef451c0b6ed8b1b4099db4e
For more details:
https://www.odaily.com/post/5136465