Support replies back apologizing profusely for the hack. They already were working on a fix for this. Two days later, they have a server hotfix, updated client versions, and a script to clean up the database. Awesome! Eric documents this script just like the previous one, and notes the new installed version numbers. Plus, removing malicious records from the database is absolutely a runbook task. Emergency resolved, data collected, reports written, life moves on.