No word on how it was recovered, but someone mentioned they think the data within might not have been accessed. Gone for over a month. Plenty of publicity. Now a stealth recovery and no breach. Sounds like someone wants to get out of paying many millions for credit monitoring if you ask me.
The questions about access remain, but not how it was re-acquired. Someone turned it in after buying it off the back of a truck. The random burglar theory is reconstituting.
And now they think they have their thief.