Server is down for the foreseeable future (aka the weekend) because the host took it offline after suspecting it may have been hacked. They haven't given me real info about the details beyond the reports supplied by their systems, though current speculation is that some kind of generic botnet managed to access it.
I have zero reason to suspect this was anything other than a random automated attack, given the nature of the reports supplied. Still, user information may have been compromised. NATURALLY this happened late Friday, so I doubt I'll get anymore staff contact until Monday. Yay.