Possible Security Issue - Reseller priveleges

[jugo]

We have noticed that someone created a reseller account a created multiple accounts on our server.

It seems that they are only able to create the reseller and then create the accounts. I don't think they have root access since we have SSH with Private Key authentication and our password is very difficult to crack considering we change it weekly.

has anyone experienced this??

We are running the latest "CURRENT" release of cPanel/WHM.

 

[ramprage]

Are you using a remote access key in anywhere, EG with a billing system at all?
Have you reviewed your cPanel access logs?

 

[AndyReed]

I don't think they have root access since we have SSH with Private Key authentication and our password is very difficult to crack considering we change it weekly.

First of all, check the cPanel access log file. Secoond, change or even delete your Private Key Authentication file, and change your password. See if that helps.