I wouldn't say end, There could have been back wholes left from the first attempt after even being hacked once there is still always after math to clean up,

If i was you guys i would but whmcs in test mode and HALT all orders for the time being.

Then start over viewing who ever has access to the servers.