I have evidence that the "Admin" account was breached. What are the necessary immediate steps I should take? For now, all I've done is closed the board.

1. Can I ban the account "Admin" (note: my normal account is an Administrator)
2. Can I revoke Administrator stats on the "Admin" account?
3. Can I force a logout on the "Admin" account?

Any quick help would be much appreciated. I'm feeling rather exposed right now

1. revoke admin rights
2. change all other admin account psws
3. have you applied the security patches?

1. I actually "banned" the admin account - is it preferred I just revoke Admin rights on the account? Does something break if it's banned?
2. Done.
3. Yes (although I wish I had patched earlier).

i'd revoke admin rights as well, since it isn't an admin account as used on your forum..

only have admins that are *REAL* admins and as few as possible

Done and done!

Thanks for the quick response.

BTW, can I force an account to logout on their next visit to the site?

change the cookie prefix does this, but it also forces EVERYONE to relogin