Here I described the recovery of an MODX-site after hacking: https://modxclub.ru/topics/virus-pronik-na-modx-sayt.-v-papke-assets-v-modx-unichtozheny-vse-skripty.reshenie..html
Mass hacks have gone since last summer. I restored a lot of sites on MODX after hacking. Nowhere not noticed damage database. It seems they are only interested in the distribution of spam links.