In addition to the steps I listed below for reporting the website in question, I would also make sure to change all FTP account passwords for your site, and if you are running any sort of CMS, update it to the later version in case a security vulnerability let attackers into your site.