Writing notes where? In an app? Or the native notes app? Was it synced with your iCloud account?

There are too many variables at play before one can safely attribute it to an attack.