Also, they handed over their SSL keys to cloudflare, which means all their traffic passes unencrypted through the NSA even if neither endpoint is in the USA. Gox did this too.
EDIT: apparently Gox recently switched to Akamai, which AFAICT doesn't do the scary-stupid, SSL-neutering, certificate-authority-colluding insanity that cloudflare does. Seriously, take a look at how they handle SSL -- I've never seen anything scream "NSA SNOOP POINT" louder than what they're doing with Globalsign.
Open a company account then open a TT with support to tell them it's a company account and send the requested/required papers. It's normally quite fast.