Case study
From hacked to hardworking: a wellness retailer's comeback
An NZ yoga and wellness store on WooCommerce. The store had been hacked, the ads looked like they were failing, and most ad clicks landed on a mobile menu that was hard to use.
Website security
Hacked website repair and security
If your site has been hacked, we clean it up and find how the attacker got in. Then we close that gap and harden the site so it stays clean. Mostly WordPress and WooCommerce.
What we do
Hacked-site cleanup
Malware, spam pages, redirects and injected code removed, working from a full copy so nothing is lost.
Finding the way in
Outdated plugins, stolen passwords, forgotten files. We find the cause as well as the symptoms, so it doesn't happen again next month.
Hardening
Updates, fewer plugins, strong logins, correct file permissions, and a firewall where it helps.
Getting back into Google
Removing 'This site may be hacked' and deceptive-site warnings, and getting Google Ads or Merchant Center reinstated after a hack.
Backups and monitoring
Regular backups and checks, so a problem gets caught early.
Signs you need this
- Visitors get redirected to another site
- Google shows 'This site may be hacked' under your listing
- Spam pages you didn't create show up in search results
- Your host has suspended the site or flagged malware
- Google Ads or Merchant Center suspended you after a security warning
From our work
How it runs
- Free 30-minute reviewWe look at your site, tracking and ad account with you.
- Written plan and quoteWhat we'll do, in what order, and what it costs.
- Work on a copyChanges happen on a staging copy, never on your live site.
- Launch with a way backA planned launch date and a rollback we've tested.
Common questions
How do I know if my website has been hacked?
Common signs are visitors being redirected elsewhere, a 'This site may be hacked' warning in Google, spam pages or links you didn't add, new admin users, or your host flagging malware. Our guide covers what to do first.
How quickly can you clean it up?
Once we have access we take a full copy, then clean and test it. How long it takes depends on how deep the infection goes, and we'll tell you after the first look.
Will I lose content or orders?
No. We work from a full backup and copy, and keep your content, orders and customer data.
Can't I just install a security plugin?
A plugin can catch some malware, but it often misses backdoors and doesn't tell you how the attacker got in. If that gap stays open, the site gets reinfected.
Do I have to tell the Privacy Commissioner?
If customer information may have been accessed and that's likely to cause serious harm, the Privacy Act 2020 requires you to notify the Privacy Commissioner and the people affected as soon as practicable. We can help you work out what was exposed.
How do I get Google Ads back after a hack?
Once the site is clean, you request a review in Google Ads, and in Search Console if there's a security warning. We do the clean-up and the review requests.
Related services
Book a free 30-minute website and ads review
We look at your website, tracking and Google Ads account with you on a call, then tell you what we'd fix first and why. There's no obligation.
- Speed and mobile check
- Tracking check: are your sales reaching Google?
- A look over your ad account
- A short written list of fixes, in order