the government is a much larger criminal organization than any hacker group so I would not be surprised
still I can't see why a japanese company would have to obey gag orders from the U.S., I don't think it works like that
either way the only safe method is to do segregated accounts where the private key is never stored on the exchange (like Bitsimple or Coinkite); then the henchmen can seize all the pointers they want