someone hacked one of my servers using postgres user account.
what I do not know is:
what is this users home folder?
where would bash_history be?
The bash_history would be located in the root of postgres account home directory, for example
Probably the user account could browse around your filesystem, but of course could not read files like /etc/shadow, unless your server got rooted by using some exploit. He also could have installed some daemons listening for network connections, or for example a irc-bot which connects to IRC and receives the commands from there.