Every time you tweet out a link to your website or make a Facebook post that has your URL you are inviting people to hack into your website. On average I get 5 to 10 WordPress attacks on my sites when I tweet out a link. If you are using WordPress and you are not securing your website you will get hacked. This is the plugin that I use on all my sites WP All In One Security.
In this video I will explain step by step including installing the plugin. The plugin also makes automatic backups of your site with just a few clicks.