I've tried going though my webhosts log to see what happened during last weeks hacker attack, but they aren't to much use.
All I know for certain is from the aftermath, that all user data was overwritten. I don't know if they managed to read any of it too. But changing your password is properly not a bad idea, especial if you use the same password elsewhere.
All screenshots are copyrighted by their respective owners.