That’s better than nothing and better than their previous response where they blamed users for getting their accounts compromised, even though most of the evidence seems to suggest that there was a security flaw on their end because of how specifically it targeted a narrow set of users. It can’t be a coincidence that only high rollers and referrers who were on the monthly leaderboard were the only ones affected by a malicious script.

If the investigation is legitimate and they find the cause of the issue, it would be appropriate to compensate the users who were affected. That would go a long way in restoring their reputation or at least salvage what remains. There are still some other issues that need to be fixed like the delayed emails and lack of customer service. Their business has been way too successful for me to think they will just let it die, but we will see if they are really committed to improving the areas which they've been neglecting in these past years and have caused a lot of disillusion.