[rmc]

This allowed for someone to pull our database ... so in effect the site was not hacked.

Weasel words. If someone has a dump of your database, then your site was hacked.