well its obviously the hosts fault since the cpanel got compromised and you arent keylogged