OKX said in a statement that the attacker forged "judicial documents" to steal the personal information of "very few" users.