I think the 2nd hack was Bob's exit plan. By selling the info to the hacker and compromising the employee computer, he is setting up the "who?" and the "how?" to point away from himself, and hoping it will also be used to explain the 1st theft. Except it didn't work very well!