An attack would be taking the site down, damaging equipment, or placing malware on the site.
The site was hacked. That’s all so far as they know now.
It was not attacked that they know of.
Maybe others agree with the “attack” terminology. I just don’t see it that way.
Such hack’s are annoying, but it’s a quick fix - change the password to something more secure than “redhen1” and re-upload the files. It’s a restaurant site. Can’t be that hard.
Yes. one cannot visit an attacked/damaged site...