They mined blocks on the side then released the new branch forcing a block reorganization. This is how double spending attacks are executed.