Looks to me like you're wrong here 
@tonyk , those two accounts never voted or had a proxy set. The account updates you saw added 
hyperethas to active authorities in the case of 
garylarimer, and 
spook to 
for-gary. The account 
spook also has active authority over the account 
for-dana, the whale that dumped ~12M or so BTS over the last couple months, and 
for-dana uses 
bytemaster as its proxy.
I too remember Hyperethas as a company used by I3 for payroll services or something like that. Anyway the name 
gary-larimer does indicate this is an account controlled by or at least related to BM, and 
for-gary and 
for-dana thus appear to be linked to him as well.
As for the change in vote amounts, I know I changed my proxy for bitsharesblocks and dev.bitsharesblocks recently before removing it yesterday in order to choose my own votes, that accounts for about 2.8M BTS...