Hi Tony,
Without details of the hacks it's practically impossible to offer an answer to your question. But, I will say that after the first or second hack, someone knowledgeable should have been able to determine the point of entry and closed it off, even if it's code on your site and not something in their server stack. They simply should be able to tell if they have qualified security staff, unless you're running your own servers there that they can't access. Six times is basically unacceptable. I can't see any value of staying there from my perspective.