Adrian Cooper wrote:
They know how and where the attack happened - through PHPList - all they need to do is update it assuming the vulnerability has been fixed, and restore their most recent backup - half a days work at most.
So what is it they have been "working on" for getting on for a week?
I have had the same problem, my server was hacked and to be sure that it would not happen again, moved to another host, took me several days to get everything to work again on a different host.
So, I believe it is quite logical that they take their time, but that is only my 2 cents.