Incident response
My Business Website Was Hacked
Quick answer
Preserve what you can see, secure the accounts that control the site, and involve the host or a qualified responder before deleting suspicious content.
Who this is for: Business owners or agencies seeing redirects, injected pages, warnings, or unknown changes.
What to do
- 01Record affected URLs, timestamps, screenshots, and provider notices.
- 02Secure email, registrar, hosting, CMS, and administrator accounts.
- 03Ask the host for logs and snapshots before cleanup.
- 04Rebuild from trusted code and verify the site after credential rotation.
What this does not cover
A public scan cannot prove that a website is clean or identify persistence in private files and databases.
This page is educational information, not legal advice or a professional security audit. Check the official requirements and get qualified help when your circumstances require it.
Continue exploring