I just received an email today from BTCC with my balances (all of them) - not only is this surprising but incredibly insecure (have never heard of a bank sending you all your account balances via email).

If you are a US citizen using BTCC then you might want to carefully consider what to do now (unless you are running your own secured email server you should assume that the IRS now knows your balances at that exchange).