Posts Deleted

• 

  kobae · Member · Sep 5, 2016 at 9:51 pm

  • Copy link
  • Add topic to favorites

  I was making a new post onto my blog and when I pressed publish it told me my post had been moved to the trash. When I went to recover it, it was completely deleted. Shortly after, every post I made had been deleted without me deleting a single one of them. Can you tell me what happened?

  The blog I need help with is: (visible only to logged in users)

• 

  timethief · Member · Sep 6, 2016 at 12:06 am

  • Copy link

  Hello there,
  re: hacked accounts and blogs

  If anyone is posting anything to your blog or removing anything from it, or changing anything in it, or if your blog has been deleted and you did not delete it, then it’s most likely that you have provided them with the ability to do so, either deliberately by adding them as official users, or by allowing them access to your login information, or by posting content that makes it easy for them to guess what your log-in information is.

  For you, the question that needs to be answered is: Who, aside from me, has access to my login information?

  Go to your email program immediately and change the password to a very difficult one because that’s how many hackers gain access to blogs.

  Read > http://en.support.wordpress.com/security/

  Change your blog password to a very difficult one > http://en.support.wordpress.com/passwords/#change-your-password
  You can also reset your password via your Settings tab on the WordPress.com home page:
  http://wordpress.com/#!/settings/

  Disable post by email https://en.support.wordpress.com/settings/email-post-changes/

  Use a secure, encrypted connection to connect to your Dashboard. Under Users → Personal Settings, check the box that says “Always use HTTPS when visiting administration pages, and click Save Changes.

  Use two step authentication http://en.support.wordpress.com/security/two-step-authentication/

  Run a security scan on your computer. See here to run a security scan http://geekflare.com/online-scan-website-security-vulnerabilities/

  Never leave your computer logged into your blog and walk away from it. Always log out properly.

  Also, be aware that Staff have records of who did what under which username and login information and when they did it. I flagged this thread with modlook for a Staff follow-up. Please subscribe to it so you are notified when they respond. To subscribe look in the sidebar of this thread, find the subscribe to topics link and click it. Note that there is a backlog and be patient while waiting.

• 

  kokkieh · Staff · Sep 6, 2016 at 9:57 am

  • Copy link

  Hi there,

  Your site’s logs show that your username deleted those posts about 12 hours ago and also emptied them from the trash. At around the same time you appear to have verified your email address (which wasn’t verified when you created the account), and then the password was changed via the mobile app.

  If it wasn’t you who did these actions it means someone else gained access to your email address, and via that to your WordPress.com account. I recommend you immediately change the passwords for both of those to make sure only you have access to the site, as @timethief also recommended above.