For that matter, a truly thorough cracker (with more time than constructiveness) might go to the trouble to identify more than one weak point, hold some in reserve, and exploit them sequentially over time - either to offer a more depressing experience to the site owner or to discredit the site's technical team [taking advantage of people willing to jump to your conclusion :) ]
A sign of incompetence would be if they had their whole database wiped out and they did'nt have any backup (ala codinghorror.com) or they got hacked exactly the same way 1 month from now.
Getting hacked 2 days in a row only means they couldn't find the weakness yet. 48 hours is not a long time. Twitter gets hacked more often than this.
They very well could be incompetent, but you are judging too soon.
Because, you know, restoring from a backup is the same as securing a site, right? And there's no way that a hacker could do worse things? Because infecting some visitors or something similar wouldn't hurt their reputation?
Sorry for the outburst, but this happens way too often.