It worked for me mainly because I guess I subconsciously grokked that ‘who stole’ was a stand-in for ‘who had stolen’.
So ‘who had stolen’ would have made it a more parseable headline, but perhaps not as snappy (which is the point of a headline - that, and getting you to read on, so minor parsing glitches serve their purpose, sadly).
