but if the 'hacker' could access QL enough to alter posts I think that's a bit of a big deal.

Would be interested to hear from QL Admin as to what exactly occurred and how.