Unfortunately, a $27 million hack is considered small nowadays. On the other hand, what's the operating income for small exchanges if something relatively unknown can lose $27 million and keep running their business (granted, they claimed there will be no further losses)? I remember a popular local exchange that I used in the past was also attacked (at least rumoured), and the number of losses is around $20-50 million iirc. They denied it, though, even though the circumstances were questionable.