Since scare tactics appear to be what drives some people to take how to fix hacked wordpress site a bit more seriously, or at the very least start considering the problem, allow me to shoot a scare tactics your way.
Also, don't make the mistake of believing that your hosting company will have your back as far as WordPress backups go. Not always. While they say that they do, it has been my experience that the hosting company may or may not be doing backups. Why take that kind of chance?
I don't think there's a person out there that after learning how much of a problem WordPress hacking is that it is a good idea to enhance the security of their blogs. However, something I've noticed through the years is that when websites it comes to securing their sites, bloggers seem to be stuck in this state.
Install the WordPress Firewall Plugin. Prevent and this plugin investigates web requests with WordPress-specific heuristics that are simple to recognize obvious attacks.
Free software: If you have installed free scripts like Wordpress, search Google for'wordpress security'. You'll get tips.