just super user gat access to hikashop and sensitive data

-- HikaShop version -- : 2.6.4
-- Joomla version -- : 3.6.5

Hello
I had an attack to my web site, so I found some user with administrator privileges.
The shop is managed by 2user One is super user and other one is administrator, I was thinking give the super user privileges to the second user too, and give the access to the hikasho just to the super user and block the administrator user, just in case for the future.
That is possible??
If that happens again in the future I dont want that malicius people have access to order and clients...what do you think about my idea??
Or do you have an other one to reach my pourpose??

Thanks
Frank