Yes Im self hosted. I know who did it and he know longer has access beyond member now. Unfortunately theres about 300 to go thru to check. And as I remove them they still show in as belonging to the higher group tho it says the trust level is 1 now. With no way to remove them from the group as its under automatic.