There's so much to unpack here. They initially say user funds were not affected and then went on to say the incident affected 9 user accounts. They haven't mentioned a hack yet which will normally affect their hots or cold wallet generally, so it's possible that this was initiated internally by a staff.
It baffles me how 9 individuals could hold $14 million in crypto on a centralized exchange, that's an average of $1.5 million held my each and is not an amount you want to leave out of your custody.