I doubt its a legit hacker, more of a script kiddie looking for attention.
You probably find that most of those sites are on the same vhost and a single vulnerability was found.
These days anyone can get a website up but very few of them actually know how to secure them.
I think this one is way more concerning, considering it could have resulted in your data being leaked and now being used for all sorts of phishing attacks.