there was an alleged hack or leak of private data from various exchanges and it is indeed the question where crypto start ups store these data sets.
I would suggest at the same place, where every company saves their customer data.

Encrypted and backuped on different places.
Naturally every platform especially with exchanges should have alternative ways to mitigate any serious events mentioned above and also apply industrial grade security mechanisms in order to safe guard both customer and company data respectively.