I have an ensim box and last night all of a sudden all files in directories with group write permissions were deleted across all the domains on the box. For example, my webmail storage folder (I use UebiMiau), where my client's webapps store invoices, my gallery albums, everything!

I suspect ensim of doing this, does anyone know about this problem... however, could it be a malicious hacker?

All my files are owned by the admin user "admin" and the group "mail" (default set by ensim). Incidentally some files created by apache in certain folders were safe from this deletion, and I can't delete them because I as the site admin don't have enough permissions.

Your insight is appreciated!