You should have a professional take a look at your site, your code, and your hosting.
Obviously it's not just as simple as changing a password so you should really do a full review. If you want help, let me know and I can probably take a few minutes to check it out and maybe recommend a few things. If you want, your welcome to PM me.