Here is Forbes' explanation: http://www.forbes.com/sites/investopedia/2014/02/28/bitcoin-mass-hysteria-the-disaster-that-brought-down-mt-gox/
The thief changed the transaction id and placed it ahead of MtGox's transaction and the thief then claimed the transaction never occurred according to this explanation.