Just a suggestion here, for when you recover a hacked account for someone. Can you please inform them they should delete that accounts posts from the time of the hack. It seems there has been the odd case where a user has had their account returned and then carries on in blissful ignorance until one of the hackers posts gets them into trouble. This could be simply an add-on to the email or whatever recovery message you send. Sorry if you already do this and they just ignore it.
Here is the case that made me think of it this morning.
AlexRus227 My account was hacked. Almost a year I unlocked it. And after the victory, my account was thrown into the ban for what I did not write. These articles were not written by me !!!