Yeah, I figured that it may have been a hack job, but I'm at a loss as to how it could have been done. If he could hack into the site, why not just delete the user data files?