Scratch

... (If this shouldn't be posted either edit/delete it, I just saw a project of someone getting hacked, and I thought why not give a quick idea on how to track down hackers.)

Check IPs if there is a IP that the account was not made on then find that users IP and poof we know who the hacker is. But ask the user for any info if they worked on another computer with a different IP. But if the same IP is being used then they're faking.