@HeartInternet found evidence of sites being hacked that DON'T have a CMS. Not great guys, awaiting response to a ticket...