Bter should be responsible enough for what has happened. They're the one who should pay the price from a  successful hack, not their loyal users.