Here some general advice on protecting wordpress from hacks and attacks. It contains some good piece of information + software that you can use to backup and find out if your server has been hack. Basically, these rules applies to other websites which are not running wordpress as well.