My WordPress website has been hacked!

• 

  glenzac · Member · Jul 15, 2020 at 11:19 pm

  • Copy link
  • Add topic to favorites

  The home page is gone and it’s showing a different page with the title ‘ Hacked by DeepWater Leaks ‘. I’ve checked the user’s section under WP-Admin, I don’t see any other user. I don’t understand how this has happened.
  As a safety measure I have changed my password and have added 2FA now. Is there anything else that I should do? Can you help me restore my site back?
  The URL is : https://glenzac.wordpress.com/

• 

  staff-mckluskey · Staff · Jul 16, 2020 at 7:58 am

  • Copy link

  Hi there,

  The only way for someone to access your account is if they knew your password.
  Changing your password and enabling the 2FA was the right thing to do. I’d also recommend changing the password to your email address and any other place where you might have used the same password.

  Make sure you select a strong password:

  https://wordpress.com/support/security/#strong-password

• 

  glenzac · Member · Jul 16, 2020 at 8:24 am

  • Copy link

  My email was involved in a security breach apparently and that might have caused this.

  Is there any way I can restore the site back to how it was?

• 

  staff-mckluskey · Staff · Jul 16, 2020 at 9:15 am

  • Copy link

  I’m not sure how did your site look like before, but from what I can see, only the homepage was changed. You can remove it from My Site>Site>Pages.

  Then you can go to My Site>Design>Customize>Homepage Settings and set the correct one to display as your front page.