Thank you very much for your help.
It’s hosted by bluehost and no, I don’t have anything else on this site besides WP.
What I would like to know is, what exactly caused it, is it hosting security, ftp, weak password hack, or is it something hacked thru WP content?