The repeat hacks like this typically means there is an infected computer on their network that they haven't found yet. Change the passwords all you want. The infected computer will communicate it right back to the C&C (command and control) server that the hackers are using.