I will make an announcement on this within the next day or so. I have still a few things to check before I get all the facts straight.
The day before yesterday a user registered in the forum. Nothing wrong with that. However that user managed to get elevated permissions and thus becoming an admin a few hours later. It was discovered the following morning (I believe the timeframe was 6-8 hours) and deleted immediately.
I am still checking the logs and found out how the user managed to get in the forum. This is an undiscovered vulnerability that vBulletin has - well clearly someone discovered it in the end.
I have patched this with the latest vBulletin version yesterday, the same time the offending account was deleted.
What I am doing now is comparing all the templates of the forum with a fresh installation to ensure that nothing has been messed up. So far I have seen nothing wrong.
There are still a few megabytes of logs to go through, hence the delay in my response.
For those that received the email - trust me I did not send it.
If you still have it, please forward it to nikos[USER=37335]longhaircareforum[/USER].com so that I can narrow the investigation window as far as the logs are concerned.
Please delete that email. We never send out announcement emails.
Thanks!