My entire server got hacked on 1/23/09. Still restoring the backup as of Sat morning. We think they got in through either phpads or Moveable Type.