Got hacked

Sometime between my last post and this one someone changed the main username on this account. Which isn’t accessible from the WordPress settings. And the back end settings (user name/password/all emails) haven’t been touched. So either my hosting company has been hacked, or has a hacker? Cause thats totally what I needed to deal with right now…..

(as far as I can tell nothing else was done, its weird, just the one user name changed)