Are the forums offline?
i doubt anyone that compromised the site could access the passwords, they're usually encrypted in the database. you should likely only the need the IP addresses of the connections made to the system then you could bring a backup of the database online and have it going again.