This is scary coz they might sell these identities and can be use on frauds.
Though this is not the first that this thing has ever happen in other exchanger, but they should improve their security.
Sometimes this could be an inside job but who knows eeehh