So they now claim the database was taken locally from someone doing "maintenance" on the Mtgox servers, rather than a SQL injection attack. I found this claim very tenuous and was likely them trying to cover their failures.

I think some of the people who've been using Bitcoins a long time are all friendly with eachother and have SSH access to the Mtgox servers, and they collaborate frequently. It's possible that Allinvain was one of them, and he stored their databases on his "work" computer, possibly as a local backup of their whole setup. This could have been stolen from him when his computer was compromised. An alternative theory is that his Bitcoins were never stolen, and he deliberately put the database into the wrong hands. Either way it is quite damaging towards Bitcoin.

Thoughts? I haven't checked the addresses yet to see if they all tie in together.