HELP: Pennywize showing fake stats
 

Pennywize is showing that around 700 accounts logged in to my paysite yesterday, so I opened my password file and was expecting to find tons with fake accounts but I found only real accounts.

I was also looking at Urchin>Usernames> and everything looks fine. Only the real usernames was logged in to my paysite. My bandwidth stats looks fine to.

So how can pannywize show 700 fake usernames, and all of those logged in with:
1 single subnet
22,055 bytes downloaded.
1 hit
1 minute online

I know that someone/hacker did something but I don't know what.
What should I do?