My website has been hacked: what to do first
Stay calm, follow the right order, and know when to call us.
1 min read · updated 10 Oct 2026
A hack feels like panic, but the right order of steps limits the damage.
Do this right away
- Message or call us and put urgent in your message. We will look into it right away.
- Change the passwords for WordPress, Plesk, FTP and your database.
- Do not delete files on your own. We need them to see how the attacker got in.

What we do
- We take the site offline temporarily or restore a clean backup.
- We find the vulnerability, remove the malware and close the gap.
- We turn on monitoring, so you know right away next time.
Prevention
Keep everything up to date, use two-step verification and strong passwords. With Edge Shield we stop attacks, brute force and bad bots before they reach your site. With a security audit we test your site the way an attacker would.
Was this helpful?
Thank you