I personally got 5 Gi stolen, that is about 15kUS$, saw one guy posting today that lost 150kUS$.
The big problem with that whole IOTA system is that they use the seed, which is similar to the private key, and no password or any protection at all, to log into their system. At least one could call it a huge design flaw. I'd call it putting everybody in huge, unnecessary risk. And that is not the first time this happens. A private key should never be exposed to anything. Never. And they require it as part of their regular usage.