They should refund the people who fell for the scam. It was their responsibility to keep their mail servers safe, they failed to do so, and resulted in a monetary loss of their customers.

Besides, the amounts lost were completely trivial in the grand scheme of things so it would be good PR for them to do it. Not that it is their duty to do it, but acknowledging the situation and reimbursing losses instead of just glancing over the issue is much more sensible. Ofc, certain protocol would need to be followed to ensure that the perpetrators themselves are not taking advantage of the situtaion.

But yeah, I've never seen any gambling site directly ask for funds through an email in return for more money. If you receive such a notice, it is 100% a scam.