While facing renewed accusations of cultural theft, the institution announced that it had been the victim of actual theft—from someone on the inside.