The hacker leaked the whole website source code. I figure they have at the very least made a new server install and run updates. It’s been 10 days since it went down.

Anyone could read the website leaked php to look for new exploits if they are still using the same code base.