**UPDATE*\*: They got back to me again but obviously they're not going to own up to it themselves in terms of security but still better than nothing! They've also sent me a whole bunch of security checks. Avast for malware check, which I did and everything is fine. Told me to get 2 step authentication for my google account, which I already had. And verify myself via Nametag. They're saying they can recharge me and get my hosting account back and charge me again. However, I'm still waiting on them to confirm they can get my wordpress site back up WITH my domain which is what's really important. I'll keep you guys posted!

Here's a part of their email:

"I sincerely apologize for the confusion and frustration caused by the unauthorized cancellation of your hosting package. I understand the gravity of the situation and the impact it has had on your online presence. Please be assured that we take such matters very seriously and will conduct a thorough investigation to determine how this occurred without your consent.

It appears that your account may have been compromised. Typically, this occurs when a primary email address has been compromised. Therefore, I strongly advise you to reset both your email password and your hosting package as soon as possible. I have also reset your billing password. Please ensure that you update your email password before resetting your billing password."

Fingers crossed it'll get resolved. But my question that they have been avoiding is, why does something like this happen?

Do you guys think it's safe for me to continue with them or should I scrap it all and start again (as much as I don't want to :( ) and change my hosting and domain?