It was hostgator. I know they've had some mass hacks before (notably via cPanel vulnerabilities), but haven't heard of anything special recently.