The crypto exchange offered a bounty matching hackers' demands after India-based support staff leaked customer data in a breach that could cost up to $400 million.