This really is the most serious crime and what bothers me the most. When someone creates an account with a username and password (and sends PMs) they do not expect that information to be taken without the admin's knowledge or consent and used or viewed. As a website admin I wasn't allowed (and never did) view anyone's PMs or passwords (which were encrypted). Helder used a security flaw in the software and took this data (and even I didn't look at it).