Mod note:
be careful with the executable, run it only on an isolated virtual machineFiles are legit. I verified them myself with my account balance. Be careful with .exe and .pdf (didn't take a look at that)
Edit: Here is the leak
http://pastebin.com/f7DPskc7the hackers removed december, january and february, but the user endbalances are right.