Оленей взломали

On June 7th we discovered some anomalous files on our webserver, and began investigating where they came from. From what we can tell, on March 16th, an administrator's account was accessed by an unidentified attacker. The attacker used an obscure feature in the forum control panel to upload arbitrary code to our webserver. Then, the attacker downloaded a portion of the forum database. The breached data contained three pieces of information:
* Account names
* E-mail addresses
* Hashed passwords
* Last login IP address