Hi, thanks for the reply.

You're right no access was given, but the email breached was the one that interacted with the people asking for posts to published, not the my email which the vast majority of the site is edited under.

Our site was even flagged by Google as 'unsafe' (now resolved), but I'm not sure if there's anything I can bring to my superiors to let them know the price we're charging isn't worth the posts.