They'd need to be able to access your account or the whole server.
Escpecially if you've just got static web pages and pictures and stuff on there.
I'd be asking some pretty tough questions of MTS right about now.
on the flipside, if someone did hack in, they should be able to tell you from where.
They may not catch the person, but at least you'd know it was done from the outside and not a boneheaded site admin.