hackers attacked my login page

I highly suggest you comment out the part of your wp-login file that emails password retrieval email. Someone managed to hack one of my sites the other day. I got an email that said this

Password Lost and Changed for user: *******

I obscured the hackers name, I am giving him no recognition.
Anyway, by the time I got this email it was too late. He had taken control of my admin account and hacked the front page, then started deleting files from my server. I still haven’t figured out how he managed to do that. At any rate, no more emailing reset password for my site till someone figures out how this happened.