But this means someone you don't want to have access to your site, have access to your site.
I gues you should at least change your password, and even though you have your whole site backed up, they can do worse things than just delete your site. I always had all parts of
ZU backed up on my comp at all times, but still they managed to do something worse to the server: They hacked into the root and deleted all accounts, and that left me without access to my account for days.