hmmm ... I really wonder.
I'd say you're lucky that somebody informed you that your site was hackable.
Think of it this way ... if it's just a dev box on a seperate network you're extrememly lucky ... if it's on a network with other machines I'd say you had been putting all your other machines in danger and if you have client information on any of the other boxes then you had put them all in danger, too.
You're very luck it wasn't a script kiddie. 14 year old who shared your pass/login with the rest of his buddies.
oh well ... things do happen ...
openoffice + gimp + sketch ...