The New York Times, repatriation activists, and the public were deceived by an anonymous data leaker's cover story, aided by a museum's secrecy.