No site is 100% safe from this happening. All anyone can do is make sure they have current backups and that their scripts are up to date.
All a host can do is ensure that firewalls and security tools are in place and all but the essential ports are blocked.
I doubt that JP or their host was to blame. It is just something that happens.
This is a real "but for the grace of God there go I" thing That COULD HAPPEN HERE!
IF you have a web site here is my advice:
- Keep local backups. On server backups are nice, but if the server fails catastrophically, the data center burns to the ground, gets nuked, earthquaked or hurricaned, or if a hacker deletes it all...you are up a creek. Keep local backup or contract off-site storage.
- Keep scripts up 2 date. Exploits in forum software and content management systems are the biggest target for script kiddies, defacers and email phishers.
This way you at least are protected if something wicked your way comes.