I’ve been having a dashboard problem and found this thread. Your last post prompted me to look at my users, and sure enough, the same JohnDillinger1903 etc. had hacked in as a user, as well as another.
What are the necessary actions to take to regain control (and security)?