or find out the ip address of the hacker that changed his password? Or what they changed his password too so that he can access his account and change the password and lock them out?
This is very serious as the hacker has access to booting the entire guild!