I just noticed that I have a guest viewing my private Admin/Moderator only forum where just the staffers read and post, been there a couple of days now. Nothing top secrete there, but it still makes me uncomfortable. I'm wondering who it is, how they got the url and what to do about it?
Go to your Who's Online page and find the user. There should be a stop-sign next to where the page is listed which means they aren't really viewing the Staff forum but getting an error message.