Is it worth sending a ticket on the main site with our license key to see if any additional info can be provided not in public for users that can create their own server-side firewall rules, WAF rules, etc.?
Also, I have gone through my DB after doing a dump, and I cannot see the typical things you look for straight away in a hack, so fingers crossed.