XEM stolen by hacker attack