They had a practice of collecting user data.  Via in-wallet links to their proprietary analytics for users to review transactions. Also their practice of requesting xpubs whenever helping users, it is very safe to assume they kept all user data they could collect because it enhanced their private analytics. They made themselves an irresistible target for the feds, and fucked their users over in the process.