This is possible when the hacker deletes old post and re-posts (as you have taken the posts just one day before and after password change.)