Thinking about it, there wasn't a big scandal at the time so clearly not everybody's wallet had been emptied. They didn't disable the email confirmation option as that's how I found out about the transfers. One confirmation for a transfer of one coin and then a minute later, another confirmation for the transfer of the rest. I stupidly hadn't set up two step verification with the mobile as I didn't know much about that at the time and just assumed the email confirmation would have been enough. Anyway, I've put it behind me (and improved my security) and only remember how much the coins cost me rather than what they were worth when I lost them. I've just looked at the exchange rate now and seen that 267 coins will buy me a very decent house these days but back then, they would have bought me a fairly decent second hand car so not that bad.