The thief called the phone company and tricked them into registering the guy’s phone number to a new SIM card in the thief’s possession.
Based on what you said, it is the phone company that was fooled here - and therefore responsible for damages.
I was just guessing and proposed a possible scenario so the OP would understand what a SIM swap is.
I did not mean to imply that I know exactly what happened.