Looks like they've been pwned.

Just checking in with admin to make sure we're not vulnerable to the same thing.

Detailed post here: https://pen.blahaj.zone/supakaity/weve-been-hacked