Hackers don't always leave a nice clean trail to follow..... maybe it's just my paranoia.

Have you contacted Lacerte's customer/tech support for info?  And maybe the IRS efile help desk?

And FWIW, this is the first reporting of this situation that I've seen (across several forums I follow).