You're not the first — and it's not your fault. WordPress is attacked automatically every day. Here's what to do, and how we help.
Most hacks are automated from the attacker's side — not targeted. Data is usually not gone, just overlaid.
Don't delete files or change passwords via the infected WordPress admin. Leave the system as is — we need the forensic trail.
Have SSH/FTP credentials and WordPress admin password ready. If you want to change host: please create an account there too.
Mail to hallo@your-server.info with subject "HACK". Briefly describe: which symptoms? Since when? Do you still have admin access? We reply within one hour.
First conversation and initial scan are free. Cleanup from €290 — depending on site complexity and infection depth. Included with running "System" or "Concierge" hosting plans. We always quote a fixed price, no hourly games.