My Site Has Been Hijacked

  • Unknown's avatar

    This site has been hijacked. amphisbaenainner1d24d608d is not the owner or affiliated in any way with Big Sandy Homecoming. An attempt has been made to recover this site and proof of ownership has been submitted. It’s been over one week and there is no word. Please advise.

  • Unknown's avatar

    That site site hasn’t been hacked or whatever story you can think of. You are simply logged in to the wrong acoount. But as you have deleted that account, we can no longer be of any help. End of line.

    I found out that your site https://bigsandyhomecoming.org/ is on a paid plan, so you simply must use the transaction id to restore access to the account owning that site – https://wordpress.com/support/account-recovery/#verify-your-account-ownership

  • Unknown's avatar

    I thought I was deleting my account, that it was hijacked. But when I deleted the bogus account, which WP said was unpaid and not worthy of assistance by a human, and after a week of no response to the account recovery request (which was linked to the bogus account, so I was never going to get an email) I chose to delete. Then I searched the site to see if it was still appearing on Google, and what happened was my real account became accessible to me – I signed in as normal and everything was fine. I don’t understand it, but I am glad to have changed my password and will proceed with caution.

    Do you have any explanation for that?

  • Unknown's avatar

    I am not sure the snarkiness was necessary. Be helpful, but be kind. The account that “owned” the site was not mine, so I couldn’t log in, use my username or password, recover or change the password, prove my ownership, or enlist the help of the account recovery process. I don’t understand what happened, how it happened, why it happened, or how I could have gotten around it other than to delete it, which I was surprised I was allowed to do without being able to log on. If you have answers, cool – if you just have condescension, no thank you.

  • Unknown's avatar

    Also, amphis…blahblahblah, as a named “member” in the first message above, was the bogus account. I neither signed is as that member (ever), know anyone with this identity associated with the account (I am the admin), gave permissions of any kind to that member, or found a way to get into my account until that WordPress entity was deleted. I would love to engage in a conversation about possible causes for the problem, in case it was some gap I have left in my security processes. I am happy to be able to resume work on my website, but am not feeling great about the solution when I still don’t fully understand the problem.

  • The topic ‘My Site Has Been Hijacked’ is closed to new replies.