It was a matter of time before something like that happened.
ICO providers should ensure that their website is secure before even thinking about doing any form of crowdfunding :/