Paul Turner hacked access to our server deleting data

Paul Turner access our server without authorisation by acquiring the username and password from a customer.  He proceeded to delete the admin account and created another with his Password and using the alias name of ‘Mike’ who is a fictitious character used by Paul Turner to receive technical support from us.