The odd thing is the coins are not being sent in the way a normal Bitcoin client would send them, the address balances are being nibbled at and combined with other small payments from other address to new addresses, like here:
http://blockexplorer.com/address/12ViYXgordxUkmPhN5PAU9vJRHwc8jftfQ. The coins are sitting in that new address. Now the question is, is that a MtGox address or still the BitThiefs? If MagicalTux is willing to lock accounts because coins were long before used to scam him of MMORPG money, he should at least be willing to find, flag, lock, and IP log coins sent directly from mybitcoin users' addresses to the exchange, disclose that those are MtGox addresses if requested, and respond to subpoenas to the identity of the thief (for private action or to be handed over to the prosecution arm of juristictional law enforcement).
Along with the magical re-appearance of "Tom Williams" at the same time, we know it's the site owner, and I have a feeling they
are being transferred to the exchange for quick sell, huge sells happening right after these transfers
Nice research!
I don't even think the service owners should be disclosing their customer data in such case - even if we prove that this money come from the stolen mybitcoin deposits.
Stealing some suckers money is bad, but there are also other important principles, which I prefer.
Like: I don't want any bitcoin service to disclose any of my data to any other entity - ever. I'm not an evil person, but still if they could that - I'd appreciate it
Which doesn't mean that I don't want the guy who stole my money to by miserable - what else can I feel?
But that's fine - it's only some pity money; don't let your dogs eat him - that could look much worse
