OK folks, after some analysis and head scratching, I've determined that the hacker compromised a member account to gain enough privileges to launch an attack.
If you have a weak password like your name or 123 or the like, please consider changing it to something stronger. A strong password has at least 8 characters, mixed case, numbers, and a special character. If you do change it, please write it down!
Weak member passwords put our community at risk from the dirty rotten hackers surfing the internet looking for easy targets.