Update on website: having spoken to our (superb) hosting company @a2hosting it appears our database has indeed been hacked. 1/2