They issued a "Security Alert" on august 24, and required users to change password as well as enabling google authentication. They suspect it was due to phishing sites from (Google, Yahoo, Bing, etc).

What did support say regarding the missing funds? Have you tried submitting a ticket directly from their site?