I was shocked a few months ago to find that one of the hosting companies that I've used in the past (a big one that shall remain nameless) was hacked (at least one of their "shared" servers was hacked). It was pretty low level, everyone's index pages were affected. It's also alarming to note that scripts have been developed to look specifically for popular CMS sites (Joomla, Wordpress, Drupal, etc) and attempt to exploit know vulnerabilities.
Regardless of what security measures you might have implemented on your site's installation, always, always, always backup your files and your database - it's painfully easy to do and will totally save your bacon if someone decides to give you some trouble. If you have access to your files and DB, it's about a 10 minute process. If you don't know how to do this, you can easily install a backup extension that can do this for you in one click, or even do it for you behind the scenes and email you the results. If you have a Joomla site, check here for some of the more popular ones. Also, most hosting companies will help you restore a backup in the event of an intrusion.


