A cyber watchdog was examining initial signs of hacking after a PHP leak. A security update had been published, but not all problems had been resolved. It remained unclear what hackers had taken, with further findings expected in the coming weeks and months; the situation could worsen.