Security Guides

What to do after a breach

Right away

• Stay calm. Turn on a maintenance page so visitors are safe.
• Change passwords for your host, site admin, database and email.
• Remove admin users you do not know.

Next

• Restore a clean backup from before the problem started.
• Update your site software, themes and plugins.
• Ask search engines to review your site once it is clean.

After

• If customer data may have been seen, check what the law in your area says about telling them.
• Write down what happened so you can stop it next time.