You should contact your web host immediately and tell them of the breach. Change your root password IMMEDIATELY if you are able to. If you have Cpanel update to the latest version. Do you still have root access, or did they change the password?