Question : SQL Injection

I am having a problem with my database, somehow somone is altering the data in my database, i talked to the IT staff and they say it might be an SQL injection. It alters all the records in one table adding some junk code, like:

so if the value before was 'aleks', after the injection it is 'aleks