We have checked on google and found a number of other websites also hacked by this person and found that they are hosted on the same server with Orcon.
We have called Orcon a number of times with no resolution to date. They refuse to accept that there is a problem and won't even escalate this to tier 2 support.
We have had the most appauling customer service experience and expect that as soon as this is resolved (if it is EVER resolved) we will be looking to new providers.
Please feed back if you have had the same or similar experiences with your own website.
[Mod (N8): Updated subject line]