We are 2016 now so I assume this was solved or they went out of business but for the benefit of a fireside chat...
My professor used to have a saying - "it's always the 5cent solution that undoes you" (He was talking about always keeping handy little cables and attachments but I expanded upon it with my program debugging)
I've been developing since 1995
- Always look for the simplest answer ("Occam's razor")
- When looking for causes - If the cause has no fix, THEN THAT'S NOT THE REASON
- Engineers will grill me for this but think about it, WHY would you be spending resources looking at a cause that would mean months of work when your project is due in two weeks. IF IT IS THAT YOU'RE PRETTY MUCH SCREWED ANYWAY - move on and use your time wisely.
You're talking about the security of a server that millions of people have used for Years - Remotely accessing a server that is used by large companies. Do you really believe that the Freelancer has figured out a way to get around that? USE YOUR CRITICAL THINKING - If he COULD do that he wouldn't be working for you he would be working for the NSA...
NO
He's not accessing it - He's left something in your system that accesses a key on his server or there is a time delayed script that is running which he had been regularly disabling. Does the event happen at regular intervals? Did the second event happen immediately after the next day?
Changing the password and stopping remote access becomes irrelevant if something was done to your code before this was implemented.
Always apply context to a problem - Critical thinking. "Explain it to me like I'm a four year old". Most engineers always seem to be looking for complicated reasons because they think that way. I always ask the graphic artists what they think and by the time I've explained it to them the solution often either presents itself or they have thought of something that most Engineers would not have come up with.
...Think of the story of the truck wedged under the bridge and the little boy that suggests "Why not just deflate the tyres?"