My forum can be accessed using someone else's URL

[merefield (Robert)]

Make the forum 100% private and ban any account that is obviously visiting every topic.

I’m sure you could take legal action but you might need a lot of money.