if your Members directory is in your cgi-bin, it's most likely safe.
If it's within the web directory, rename it now! They could easily get any Members entire profile that way.
I have my Members directory so it doesn't even have an address on the internet, only being accessible via ftp