He had server access because I trusted him. He wasn't supposed to have access to my domain account, and I didn't share my credentials.
I had another friend on the account because I was paying for his domain and wanted to let him administer DNS. They conspired together and were able to leverage this access and the lack of account ACLs to transfer everything away.
This was well over a decade ago.
They never invested in StrategyWiki, so it never realized the vision I had for the site. I had started to pay contributors and invest in content to bootstrap.
This guy came from the MediaWiki purge of video game guides and felt like he owned and deserved the site, despite the fact that I had created most of the original content. He was ten years older, well paid, and threatened me with a lawsuit. I was a college kid and couldn't do anything.
I learned a hard lesson. It's stuck with me.