If it was an exploit via the forum software (mybb) could they have actually gotten root access to my whole server? If so I'd think they would've hacked all my sites but they didn't. So if they only had access to that 1 account, if I just terminate that 1 account I should be ok right?