My site seems to have been tampered with – have backups

Hello,

Thanks for coming to see if you can help. It looks to me like someone got access to an admin account on my site and had a small fiesta. I found many of my posts in the trash – not permanently deleted, I was able to restore all that was in the trash. It seems a few user accounts were also deleted, including some admin accounts.

When I restored the deleted posts, some of them were author by a deleted account, which I can’t get back. This has the posts in a sort of limbo state where I don’t think they are really published, because they have no author.

I have backups for database, plugins, themes, uploads, and others. Which do I need to restore in order to get these posts back to the way they should be? To me it seems I need to restore the lost user accounts and the posts themselves, because some of the posts seem to have been corrupted as well. Would those be housed in database, uploads, or others?

Thank you for helping me work through this.