If they truly replaced those clients' balances, I assume they were hacked; if not, it was an inside job to take their balances. Hack news is the most effective approach to trend these days. If we're being serious, no legitimate hacker would transfer compromised money to exchange tied to their real life dentity.