is your server secure? what control panel is it running. Is your kernel, control panel, php, mysql, etc all up to date? How about scripts on your site, are you running any? Have you figured out how they got in? Is your FTP password secure?

Please keep us updated on this as its very important to figure out what happened to avoid it happening again or to others.

thanks,
Luke