Drupal if you werent quick to patch assume your site was hacked