LOL. As I said before. What about the backup? What about the bin-logs?

Anyway, is there evidence for your assertion? How was the database deleted? Did the "hacker" drop the database? Did he delete the datafiles on the disk? Or did he remove the OS packages? What did your "admin" say about this?