I believe the situation is a tad more complicated because the hacker immediately went onto these old school accounts and sold items for USD rather than TC. I heard from a source that the sales were done on "Paypal gift" mode, which according to the person who talked about it makes refunds and scam reports through their website difficult or impossible.

The people who's accounts compromised did nothing wrong, they'll more than likely get their accounts back when upper administration figures out the best way to fix the mess.