
Do I need to report a hacked website to the ICO?
Only if personal data was affected and people are at risk. Many website hacks don't touch personal data, but you need to check.
Home / Guides
Plain answers to the problems UK small businesses search for most. If you'd rather we just fixed it, book a call.

Only if personal data was affected and people are at risk. Many website hacks don't touch personal data, but you need to check.

Contain it, find out what was exposed, and decide whether to report it to the ICO within 72 hours.

Odd sent items, new inbox rules and customers getting strange invoices are the giveaways. Here's what to look for.

Mostly through out-of-date plugins and reused passwords. A handful of habits closes nearly all of it.

Google has found signs of spam or malware on your site. Here's how to see what it found and get the warning removed.

Don't delete everything. Take a copy, change passwords, and find out how they got in before you clean up.
Tell us what's wrong and when to ring. Two minutes, no account, no call centre. The technical questions come after and you can skip them.
Booked. We'll be in touch at the time you picked.
A few more details help us come ready. Skip anything you don't know.