It goes on from there, but I'm concerned as to how this may have happened, and what I can do to fix and prevent it from happening again.
Check with your host--I have had shared accounts where hackers got in and edited files.
I don't use those hosts anymore. :)