The fact that they put the site offline is prove that they do care about security. If there is something wrong it provides that further fraud is stoped. But they do need to give us more information. A simple twitter post is not enough.