Re: Having identified where the money went ...?
Most of the money is in the form of crypto currency. That is why it is irretrievable without the passwords or private keys. It is trivial to check the corresponding public keys against the ledger to determine whether the funds have moved.
