[quags]

Well cpanel is written in perl, and certainly hard to read but overall I would say cpanel is probably one of the more secure control panels. This hacking, sounds like the systems were root compromised and unlikely to be related to cpanel. I would guess it is more likely credential compromise, perhaps phishing related on staff themselves.