maybe it's your hosting company servers that could be compromised which could lead to your site getting hacked..

1. change the folder name of your admin cp
2. allow ip only to your admin cp
3. look up current vulnerabilities and joomla