The highest priority task, in this case, is to fix the problem as fast as we can (ASAP). The other important thing is keeping the website up to date, regular CMS and plugin updates will prevent from bugs and decrease security risks.