Let's keep our fingers crossed they didn't suffer any loss of Bytes. We have still not heard anything from them yet. We only have the same information as everyone else can read on social media and news outlets.
They operate in New Zealand and are regulated under that jurisdiction. They would be charged with theft if they seized customers' funds. I have a very hard time seeing that would ever happen. The coins they lost (we still don't know if Bytes where stolen or not) where customers' coins, and therefore it might not be possible to reimburse customers for that. But coins that wasn't stolen will still be in their wallet and once they re-open, customers will have legal ownership over those coins.
Right now, they have frozen all wallets which is definitely in everyone's best interest. We can only wait and see what happens. But right now, neither Cryptopia nor the New Zealand police and cyber crime unit has made any announcements about what exactly has been stolen.