[Exchange] HitBTC login email address leak

[Quark]

Received password reset link from USA IP (Phoenix, United States, *.adsl.inet-telecom.org)
Used unique email for HitBTC.

Withdraw my funds succesfully from active session, 2FA enabled.

[Fortify]

That's one good way to verify a website got hacked, if the email address you only used there starts receiving mail. Did it only happen today or have you received other emails in the past?