Hacked at cex.io

Yesterday morning my cex.io account was hacked and also my email. The hacker sold the GHS I had and withdrew the funds. I had deposited 10 btc into my cex account. My cex account is now frozen by cex and they are investigating – whatever that means. Does not cex have the obligation to make this right??

2FA should be mandatory, not an option. In addition, they need tighter security for withdrawals.