Well, in any case similar to this one:I know, that's how it was recently hacked, but a few months ago there was a bad vbulletin exploit going around and ProjectPokemon was a victim of it
Change Your Password!!!
(For users that usually never change their password on project pokemon's website)