Re: Oh Dear - I think I've been hacked!
Heya
Looks possible.
Without the access to confirm things like the db/local.php and the state of the .php files its almost impossible to tell.
Email me away from tw.o and Ill go through some things if your still stuck and havent found a solution.
p.s. Good to hear about the business expansion!