[Ipstenu (Mika Epstein)]

OK I will change all passwords but no one else knew them anyway so if someone was able to get into the system somehow won’t they be able to do it again?

Depends on how they got your password. Also, always use SFTP and SSH to edit your site. Cleartext passwords is bad.