You could put in a support ticket and they would help you. However, you have done nothing in regards to figuring out how they did this. You need to look at your access_logs (if you don't know where they are, ask your host) and see how they did this. If you don't figure out how they did this, and fix the issue, they will just do it again.