Guys I just got in touch with the people who make the board we are using. I'm talking about the maker of Vbuletin. I was asking him if the PMs are secure and I got this response.
***********
Without knowing a member's password, or having direct access to the database, private messages are exactly that - private.
***********
Everything is stored on a database, but there is no way we are interested in trying to crack the database to view PMs. Everything is secure guys. Carry on.
If you want to know something, we are going to do whatever it takes to find the answer.