As I am not an expert on vBulletin, cannot propose other solutions. If boss says a roll back was necessary for our personal details protection, that's fine with me. Unfortunately this things happen. Who knows how many e-mails and passwords that may have been used in other places, the attacker gained. So it really is a very serious incident.

Ioannis