BuddyPress.org

Yep sorry I was referring to changing login name which adds to obscurity by leaving Admin as the visible user yet one would need to know the actual and different login name, it works after a fashion except for the fact that the new real login is shown on one of the @mention links but not all.

As for the method used to gain access not sure, all you can do for the moment is change every password and then keep a clsoe watch. Maybe others have some other suggestions.