For Newcastle businesses whose website has been broken into
A hacked site usually looks normal to the owner and wrong to everybody else, and the warning often arrives from a customer.
A report on your own site, showing what it runs on, how old the backups are and who still has access to it.
By Reece Rainer
spareday, Newcastle NSW
Last updated
13 September 2026
Read time
3 minutes

Since it went live my phone hasn’t stopped ringing.
He created a stunning website for us that captures and nurtures leads with an automated email marketing system, which has filled a huge gap in the business and saved a lot of time (and money!).
Reece has been generous, reliable and knowledgeable in creating an online presence for our sporting club. He is good to work with and has good technical abilities.
A hacked business website rarely announces itself. The pages look normal to the owner and serve somebody else's links to everybody arriving from a search.
What happens in the first hour shapes the repair, because every hour adds warnings that are slow to lift.
Change the passwords, take a copy of the site as it stands, tell the host, and stop the advertising. Those four cost nothing and protect what happens next.
A rushed clean-up destroys the evidence of how somebody got in, which is how a site gets broken into twice.
Either a clean backup from before the break is restored, or the site is rebuilt from its content. Which one applies depends entirely on whether a good backup exists.
Removing the visible damage is not the job. What was left behind to get back in is the job.
Four changes cover most repeat breaks: updates applied monthly, backups held off the server, fewer people with access, and a second step on every login.
Small business sites are rarely targeted by name. They are found by a machine looking for one known fault.
Related reading from us: Web Hosting Company Newcastle.
The usual signs are a warning in search results, pages that redirect elsewhere on a phone, or a customer saying the site looked wrong.
Often yes, when a backup from before the break exists. Without one the site is rebuilt from its content, which takes longer.
Yes, once the site is clean and reviewed. It lifts over days rather than instantly, so the clean-up is worth starting early.
Most small business sites are broken into through an out of date plugin or a reused password, not through anything aimed at that business.
One monthly fee covering everything, month to month, no lock-in. The number depends on the business and gets given on the call.