TheMadScientist - 7:05 pm on Nov 1, 2012 (gmt 0)
I'm definitely sorry to hear about this...
I find it hard to believe that whoever did the customization didn't maintain a local copy.
I cannot imagine the person(s) who did the work not having a backup copy of everything, or 10 ... I code ... I usually have one 'complete most recent version' and between 5 and 10 complete copies of previous versions stuffed away somewhere in a zip, never mind all the pieces of incomplete versions I usually have somewhere I could piece together to rebuild an entire project again if I had to.
I would definitely contact the person(s) who did the work and tell them to find a copy of it, because I can about guarantee you: they have one somewhere, even if it's in pieces that need to be reassembled.
But, I would not put it back up until you figure out how the hacker got in, because if it was through the code, without a fix you're making it too easy to do it again.
Also, if the hacker's selling the username list, he has at least that much...
It's yours, Find a Way to Get It.