Your Drupal site got hacked. Now what?

This information is useful should your Drupal site get compromised. Please report any details to the security team at security@drupal.org. The security team is unable to help with individual sites, but does like to keep track of compromised sites to see patterns.

Your Drupal site got hacked. Now what?

The worst case scenario has come to pass: a vulnerability somewhere allowed a malicious individual (or bot, more likely) to take over your site. Some good news: you've noticed that they did it. Bad news: now you have to clean up.

This guide will give you a series of steps for how to deal with the situation. It may not be exhaustive.The ideas are presented in chronological order. At each step, you will have to make decisions and take actions that are most appropriate for your situation.

Sign In or Register to comment.