How do I know if my site was hacked—and what should I do first?

A hacked website is both a technical and reputational risk. Warning signs include unexpected redirects, unfamiliar files, or security alerts from your host. Early, proactive action is key to minimizing harm.

First steps:
1.         Take the site offline to prevent further damage.
2.         Change all passwords immediately.
3.         Alert your hosting provider and run a malware scan.
4.         Restore from a clean backup if possible.