I have a small business and i have a few thousand users. Anyone that can get his hands on my database would be having a pot of gold if it were to be used for malicious use despite some reasons. I currently use an offshore host. Can the host admin just steal my sql database? Yes it is encrypted but it's not like decrypting with hashcat is very difficult. Another example, you know those top forums that everyone wants to get his hands on their dbs. Hackforums.net, Sythe.org etc..... These website's databases are worth THOUSANDS if not millions. Can their webhosting providers steal their databases? Cause if i'm the admin of a large hosting provider with the ability to peek on their db i know i would. Any safe way of protecting your info?