Administrators Thanked: 265 kez
You need to revoke any access given to that user and/or remove that attacker account completely. Then make sure you change all the important passwords that the attacker may have got.