The script that they uploaded was able to get usernames and nothing else. It tried to use things that had been protected against. We went through and updated all configurations on the server and made sure everything was good to go. No data was compromised, no accounts other than our main website was impacted.
Again I am not deflecting anything. There was an issue it happened, we handled it. It's over. I am working 2 jobs, running a company, and just haven't had time to be here. Sorry If that looks like deflection. We are doing what we have to do to reorganize the company to keep it strong. Need to make sure the company stays funding itself.