Some smaller hedge funds with weaker security controls may have lost funds in the targeted attack, sources said.