--- title: "Hacked Website? What to Do in the First 24 Hours | MCC" description: "A hacked site needs calm, ordered action. Follow these steps to contain the damage, clean up, restore trust and prevent a repeat." url: "https://mcc-solutionsnj.com/websites/guides/hacked-website-what-to-do-first" --- Guide · Updated October 12, 2026 # Hacked Website? What to Do in the First 24 Hours Signs of a hacked site include redirects to strange pages, new admin users you did not create, warnings from your browser or host, spam pages in search results, or a message from a customer who saw something odd. Panic leads to mistakes, so work through it in order. By [Matthew Coleman](/about), MCC Solutions **Quick answer.** If your site may be hacked, first confirm the problem in a private window and by searching your domain for unusual page titles, then contact your host right away since they may have scan reports and can isolate the account. Consider a maintenance page if customers could be affected. **Free tools:** [Search result preview](/websites/search-result-preview) · [Free website SEO check](/websites/seo-checker) ## Confirm and contain First confirm the problem by looking at the site in a private window and by searching your domain in a search engine for unusual page titles. Contact your host right away; they may have scan reports and can suspend or isolate the account. If customers could be affected, consider putting up a maintenance page while you work. Do not delete everything in a hurry. You need evidence of what happened and a copy of the site for the cleanup. ## Change every credential From a clean computer, change passwords for hosting, the website admin, FTP or SSH, the database, your domain registrar and the email address tied to those accounts. Turn on two-step verification. Remove unknown administrator users and review who has access. If a login was reused elsewhere, change it there too. ## Find the cause and clean up Compare the site with a known clean backup if you have one. Common entry points are outdated plugins or themes, stolen passwords and pirated software. Restoring a clean backup is often faster than hand-cleaning, but update everything immediately after, or the same hole will be used again. If there is no clean backup, a professional cleanup service or your host's security team can remove malicious code and check for hidden back doors that let attackers return. ## Handle search and browser warnings If a search engine or browser flagged your site, fix the problem first, then request a review in Search Console. Remove spam pages and make sure they return a not found status. Warnings often clear within days after the review, though timing is outside your control. Check your email deliverability too. Compromised sites sometimes send spam, which can harm your reputation. ## Notify and prevent a repeat If your site collected personal information such as names, addresses or payment details, you may have notification duties under state or other laws. Talk to an attorney about your obligations, and tell your payment processor if card data may be involved. Be honest and brief with customers about what happened and what you did. Afterward, set up backups, updates, monitoring and least-privilege access. Write down what you learned in a short incident note. ## What to collect for the cleanup Save notes as you go: when you first noticed the problem, what you saw, which pages were affected, and which passwords you changed. Ask your host for access logs and scan results, and keep screenshots of warnings. This information helps whoever cleans the site find the entry point, and it helps if you need to file a claim or report. Also check Search Console for a security issues message and for new owners or users you do not recognize. Take a breath before contacting customers. A calm, short message that says what you know and what you are doing is better than a speculative warning. Update it as facts become clear, and keep records of what you sent. ## Common questions **Should I pay a ransom?** Seek professional guidance first. Paying does not ensure your data is returned, and good backups usually remove the need. **Will my rankings recover?** Usually, once the problem is fixed and any warnings are cleared, though recovery time varies. **Can I clean it myself?** Simple infections sometimes can be, but hidden back doors are easy to miss. Professional help is worth considering. This guide is general information. Search engines change how they work and their guidelines; check Google's current documentation for your situation. Nobody can guarantee a ranking. Let us handle it [### Website care & updates Monthly website care: updates, backups, security checks, speed and content changes for small businesses. Website care →](/websites/services/website-care)[### Technical SEO & schema markup Technical SEO for small business websites: indexing, sitemaps, redirects, canonical tags and schema markup for local businesses and services. Technical SEO →](/websites/services/technical-seo-and-schema) More guides - [WordPress Updates and Plugin Safety: A Simple Routine](/websites/guides/wordpress-updates-and-plugin-safety-routine) - [WordPress vs Wix, Squarespace and Custom Sites Compared](/websites/guides/wordpress-vs-wix-squarespace-vs-custom-website) - [How to Choose WordPress Plugins Without Regret](/websites/guides/how-to-choose-wordpress-plugins-without-regret) - [301 Redirects Explained: When and How to Use Them](/websites/guides/301-redirects-explained-for-small-business-websites) Free tools - [Website basics check](/websites/seo-checker) - [Is your website working for you? quiz](/websites/quiz) [All guides](/websites/guides) Reach small business owners working on their website and Google listing who read this guide: [advertise here](/advertise#websites). Do it yourself ### Small Business Website Starter A fast, mobile-friendly one-page site you edit in a text editor and host anywhere, with the sections a local service business needs and a plain setup guide. [See what's inside ($29)](/toolkits/small-business-website-starter) [Free sample](/toolkits/small-business-website-starter#free-starter)14-day full refund ## Rather have us handle it? Ask for a quote. [Get a Quote](/websites/#quote)[Call (908) 444-6373](tel:+19084446373)