In the past I've known a brief hacking attack to result in a DBA to be dedicated full-time for two weeks solid to clean up the mess and that was after the hole was plugged.