SSL & Security // updated 2026-07-22
My site was hacked — what now?
Triage, contain, clean, and restore.
- Take the site offline (maintenance page) so visitors aren’t infected.
- Rotate every credential: cPanel, WordPress admin, database, SFTP, email.
- Restore from a known-good backup taken before the compromise.
- Update WordPress core and every plugin/theme to the latest version.
- Enable 2FA on all admin accounts.
- Turn on SiteLock or a WAF in front of the site.
- Submit a review request to Google Search Console if you were flagged.
info
Call (480) 624-2500 and we can walk you through it — do not skip step 2, or the attacker will re-enter within hours.
Still stuck? Our engineers answer the phone 24/7 — (480) 624-2500.
