What To Do When Your WordPress Site Gets Hacked

Don't Panic: A Calm Approach to Website Security

Finding out your website has been hacked is a stressful moment for any business owner in Buffalo, NY. Whether you notice strange links appearing on your pages, your site is redirecting to suspicious domains, or Google has flagged your site as dangerous, the first step is to stay calm. Since 2003, I have helped over 300 clients at Kenton Web Design navigate the technical challenges of the web, and security issues are unfortunately common in the WordPress ecosystem.

Step 1: Identifying the Breach and Cleaning the Files

The first thing I recommend is scanning your site to see the extent of the damage. You can use security plugins or server-side tools to find malicious code hidden in your WordPress core files or your themes. In Western New York, many local businesses rely on their websites for daily leads, so getting back online safely is the top priority.

Step 2: Securing Your Accounts

Once the malicious code is removed, you must change every single password associated with the site. This includes your WordPress admin users, your hosting control panel, your FTP accounts, and your database credentials. If the hacker gained entry through a compromised password, leaving the old one in place will just lead to another hack in a few days.

• Change all WordPress administrator passwords.
• Update your hosting account and FTP passwords.
• Rotate your database credentials in the wp-config.php file.
• Implement two-factor authentication for all logins.

Step 3: The Importance of Backups

The easiest way to recover from a hack is to restore a clean backup from before the infection happened. However, many business owners realize too late that their hosting company's backups are either incomplete or not kept long enough. This is why I emphasize the importance of off-site backups.

In my WordPress Care Plans, I ensure that backups are managed correctly. If your site goes down or gets compromised, having a reliable restore point turns a catastrophe into a minor inconvenience. Without a backup, you might be forced to rebuild parts of your site from scratch, which costs much more in time and lost revenue.

Prevention Through Ongoing Maintenance

Most hacks happen because a site was left unattended. Software needs updates, and WordPress is no different. As a WordPress specialist serving Western New York for over two decades, I developed my Care Plans to take this burden off your plate. I handle the updates and the monitoring so you can focus on running your business.

My Care Plans are designed for different needs. The Essentials plan is $149/mo and includes 1 hour of hands-on help. For businesses that need more active support, the Growth plan is $399/mo with 3 hours, and the Priority plan is $799/mo with 5 hours. Please note that unused hours do not roll over to the next month, as I dedicate specific time each month to keep your site healthy.

The Link Between Security and Speed

A bloated, slow site is often an insecure one. Old plugins that haven't been updated in years are common entry points for hackers. When I perform a WordPress speed optimization for $795, I don't just make the site faster; I often clean up the technical debt that leaves you vulnerable. A fast, lean site is easier to monitor and much harder to break into.

If you are using Shopify for your e-commerce needs in the US or Canada, I also provide Kenton Commerce plans starting at $499/mo for 2 hours, $999/mo for 5 hours, or from $1,500/mo for 10 hours. While Shopify is a closed platform and less prone to traditional hacks than WordPress, keeping your store optimized and updated is still vital for your bottom line.

Get a Professional Perspective

If you are worried about your current website's health, I offer a free 3-point website review. I will take a look at your site and give you honest feedback on its performance and basic security posture. It is a no-pressure way to see where you stand.

Whether you are in Lockport, Buffalo, or anywhere in Western New York, I am here to be your long-term technical partner. I’ve managed over 300 projects since I started Kenton Web Design, and I’d be happy to help you secure your online presence.