Sometime in the last few weeks we seem to have been hacked. They were able to add a bogus item to our calendar.

I have changed the passwords for anyone who can edit the site as well as our CPanel password.

Is there anything else I need to do?

Check with your hosting company and see if they can help you read the logs and find out if there were any other attacks or what kind it was.

Also ask them if they can help you with removing any code injections. Hostgator will scan your site for you, but some hosts won't, it won't hurt to ask.

Scan the computers of anyone who has access. Someone may have a key-logger virus that allows the hackers to get their passwords.

Make sure you have updated Drupal and any modules to the latest versions.

You might be interested in this www.ostraining.com/blog/joomla/help-ive-been-hacked-now-what/

Hope that helps.
Ed

Hi bezu60

One thing from me ... do you know if they actually did hack you or if they just create a fake account and submit an item to your calendar?