Also, someone needs to teach these script kiddies that brute forcing does not equate to hacking, hacking takes intelligence and knowledge, something these kids seriously lack.
I think the only thing you can really do is restore from a backup, and enforce 2 factor authentication for all staff members.