Another heads up for any VPS / hosting company or those selling products to such. When you are hacked, some States in the United States require that you document and record the event with offices like the State Attorney Generals Office. You are likely subject to regulations in many States...