From Seclog for search of Dovetail (though this may be useful)
January 27, 2016, 02:18:08 PM - dovetail - password changed
January 27, 2016, 02:13:31 PM - dovetail - password changed
(seems the hacker forgotton what he changed the password to. OR. The owner managed to regain ownership of the account through email!) Which do you think is more likely?
wensbo - no change
WouchtSack - no change
I know this is still inconclusive but it may go some way to explaining it!