Stop panicking - I believe it's obviously NOT an external, malicious hack, it'd have been restored from the daily backup already (CTO here ).
It IS an 'internal' hijack by CV, most likely ordered by JD.
It IS an 'internal' hijack by CV, most likely ordered by JD.