the criminals who accessed the programs used the NATS admin login. i believe that means that they have access to pretty much everything - affiliate info, member info, everything that is stored in NATS.

at least a couple webmasters who received complaints from members joined their own sites and did start getting spam.

all the NATS programs that i am aware of. you click to get your links, and first you are asked to choose your campaign, and if you don't have a campaign, default shows on the dropdown.

yes, when i checked a couple days ago, several NATS program owners said that they found regular daily logins every few hours from the NATS admin password.

if certain steps aren't taken by NATS program owners, i believe that the people with the NATS admin login will continue to be able to log in and collect member and affiliate info as well as having access to stats.