Originally Posted by sicone

Along with other good advice in here. You may want to consider locking down access to certain files/directories with .htaccess files so that only specific IP's can get to them.

<FilesMatch wp-login.php>
Order deny,allow
Allow from your.ip.goes.here
Deny from all
</FilesMatch>

# protect wpconfig.php
<Files wp-config.php>
order allow,deny
deny from all
</Files>

# protect the htaccess file
#<files .htaccess>
#order allow,deny
#deny from all
#</files>

# disable directory browsing
Options All -Indexes


Edit: I see Achmed was just pointing this info out for you.

Originally Posted by BIGTYMER

Amen. Let this be a wake up call. Backup, backup and do more backups.

Set a daily cronjob to email you a backup of your MySQL databases. Use something like WinSCP and Windows Task Manager to auto backup/sync your sites.