Honestly I have aged 10 years over the last 3 days.
Apparently progress is being made, the hacker used an API to gain access to passwords off my server.
What you guys maybe don't realise is, apart from GRNET which is my baby, I am responsible for 60 other sites, and that hack you see above was deployed against them all. I was ready to throw in the towel, so I hope this is real progress by the security team and we are heading out of the woods.