there's no logs related to changing of password and username of my Super Admin.
it sounds weird isn't it?
It could have been done through phpMyAdmin which doesn't get logged in the Admin CP. Sadly phpMyAdmin doesn't log database operations.
If the "hacker" got the original password, he could have changed it in the user-cp, also leaving no log entry.