I'm still investigating how exactly it happened, I don't want to blame anything or anyone, it could be entirely my own fault for not having optimal security. If I'm sure it's a leak in vB I'll let you know, for now I think keeping it neutral is probably best.