If your sure that the person got in by guessing your FTP account's password (which your not) then make your password stronger. Change it and make it harder. Also, you say someone else is hosting your website? And speaking of the user who negged you, you could post his name here or you could alert Negative who it was and let him handle it.