If you discover that a client's website has been hacked, it's important to take immediate action but also to remain calm. Here are the steps you should take:
1. Do not start deleting files, accounts, or restoring backups. This can result in the loss of evidence and make it harder to determine the source of the hack.
2. Log in to WHM and suspend the affected website. This will prevent further access to the site while preserving as much evidence as possible.
3. Open a support ticket right away and we will be able to investigate the issue and provide guidance on what steps to take next.
Remember, responding quickly and calmly to a hack is important to minimise damage and protect your clients. By suspending the affected site and contacting us, you can ensure that the situation is handled promptly and professionally.
