http://www.cnn.com/2003/TECH/internet/02/11/hacker.hacked.ap/index.html
Thanks to Greg B for pointing out this article about how Kevin Mitck's web servers were defaced. More anecdotal evidence that the only safe box is one that isn't connected to the Internet.