We tightened our security restrictions in many places. Old open orders (>30 days) are now in offline storage for dispute resolution purposes, only visible to senior support staff with very limited access. Your information is safe, and not on the live system. We went through a lot of humble "what if this attack had been worse" thought processes this week as a team, and this is one of the improvements made as a result.