Are you using MyBB version 1.6.2? There is a security fix in version 1.6.3 so you need to upgrade if you are.
Check your Admin Log in Tools & Maintenance to see what templates where changed by that user.
everything seems to be fine except that he changed the Admin password and Email ...
I was able to retreive my admin user via PhpAdmin editing the sql database