Someone is doing something very wrong in FXCM

FXCM was hacked.

http://ir.fxcm.com/releasedetail.cfm?ReleaseID=934649

My question is not about hacker or cybersecurity.

I think someone is doing something wrong in FXCM:

According to FXCM security procedure, any fund withdrawal MUST BE MADE TO AN ACCOUNT HELD BY THE SAME CUSTOMER. In fact, recall Jason Roger talked me about it in this forum.

So, even if I gave my ID and password and all security info to someone, this person will not be able to transfer my fund to his(her) account. The transfers can only made to my own bank account.

Now FXCM made unauthorized transfers to hackers’ accounts (which don’t belong to the customer), this should never happen according to the security rules.

So please tell me: how could a customer transfer fund to other person’s account? How did it happen?

Thanks!