You don’t need the exchange to do this. You simply need corrupt employee of the exchange with access to the information.