Have you reported the issue to your host? What are they saying? Are they indicating whether there may have been some issues recently, either with the mailserver your account is on, or perhaps even other hacks into other accounts on the same server?
Someone stealing your admin password and logging in and deleting things is *not* necessarily a "hack" attempt. That would be theft or vandalism.
I'm not seeing this issue as being a hack indicating a vulnerability in the code.
Then again, you haven't indicated what measures you've taken to secure your site etc as per the guides published for that purpose.



