Sec. log shows that mr.zeen had his password changed February 16.
How are you seeing the logs of this user? I've heard people talk about logs before so I'm curious.
@zeen66 it's strange that the hacker hasn't changed the bitcoin address of your account.
edit: I found the logs