Any idea how you were vulnerable and how you got hacked?

Probably an SQL injection flaw.. The guy looks more like an “internet drive-by graffiti artist” than necessarily doing it for profit.