I was working in one of my ATA sites (I have 7) today and out of the blue 6 out of 7 of those sites seemed to automatically update to the current version of ATA. (No, I don't update ATA because it's a pain transferring over theme options. It's easier to leave things alone.)
In a panic I called Bluehost and they were able to restore from the version that was on their servers at 2am this morning (although I do have my own backups to restore from).
I've checked the access logs and nothing seems fishy - at least that I can see. And the Bluehost tech couldn't see anything from their end, either.
Does anybody have any info on a forced update that came from ATA? This is the first time this has happened. And, yes, I've now changed passwords at Bluehost and the individual sites.