Sucks guys, exploits happen with all forum software though.
Don't waste your time trying to figure out the person or group behind it, they're just skiddies after-all, who's main goal is to gain some sense self of importance, so don't give em it.
Best thing you can do is find out how they got in, report it and wait for a patch, or patch it yourself.