It looks like they were not hacked exactly. They just left some backups in the open:
http://www.google.com/search?q=site:videogamesplus.ca+inurl:...
Edit: wow, it was not only the customer database. It was everything: http://www.google.com/search?q=qbsm_export+filetype:sql