In another thread kee said that GoDaddy domain is irellevant
I agree with full forensic inspection and to find an attack vector hacker used.
I guess that plaintex file on db had other passwords too among the wallet pass.