Hi David,At this point you need to ask your host about how the site was compromised, it is really their job to keep your site safe.
While it's possible Fatty was compromised, it's very unlikely for two reasons: Fatty is pretty secure and it isn't that popular. There just aren't very many people that have access to Fatty.