If youve managed to login in, why not change the mining details and access username and password for the miners. Then wait and see if it happens again.