Perhaps they were noticing something suspicious when the exchange halted its trading engine in the previous times. And right now they are hacked. Coincidence?