Andrew Berry hits the nail on the head here. In my one catastrophic hacking incident, I found that ultimately the weak link was that my FTP passwords had been intercepted. SFTP FTW. A lesson I only had to learn once, and I do my best to steer everyone towards SFTP whenever I get the chance.