So looks like it was a phishing attack. It is very sad no matter what happened.
Can exchange secure our investment and how much would that cost us as users?