WooCommerce shop hacked
A shop is the most unpleasant case because it cannot simply be shut down and because payment and customer data are involved. Both increase the financial damage as well as the legal requirements.
I clean up the site while it is running and make sure no order is lost.
WordPress expert from Schleswig
★★★★★ 5,0 on Google
- Response within 4 hours
- Site clean again within 6 hours – otherwise you only pay half
- €280 fixed price plus VAT
- Money-back guarantee
Report an emergency
I will get back to you within 4 hours.
What matters most for a shop
Four points distinguish cleaning up a shop from cleaning up an ordinary website.
Orders continue coming in
Orders continue to come in while the work is being carried out. The database must therefore not be restored from a backup, otherwise exactly these transactions will be missing.
The payment process is a separate target
Tampering at the checkout steals card data. This area is checked separately, even if nothing else appears to be wrong.
Customer data increases reporting obligations
Addresses, order histories and accounts are personal data. The findings must therefore reliably document what could have been accessed.
Extensions are the most common entry point
Shops use many additional modules, often from different sources. This is precisely where the vulnerability lies in the majority of cases.
How to proceed with a shop
Coordinate immediate measures
We first clarify whether the payment process should be paused temporarily. This decision depends on what the initial indications reveal.
Secure without interruption
The files and database are backed up while the shop remains operational, so orders can continue to be placed during the process.
Clean up and check checkout
The malicious code is removed, after which the entire ordering process from cart to confirmation is checked and traced with a test order.
Secure and document
Access credentials and keys are renewed, and payment providers are informed if necessary. You receive a report that can be used to notify the supervisory authority.
Transparent costs
Malware scan
plus VAT · one-time
- Complete inspection of files, database and server configuration
- Analysis of access logs
- Written report with all findings
- Strong IT compliance image
If you commission the cleanup afterwards, the 50 € will be fully credited.
Most frequently chosen
Cleanup
plus VAT · fixed price, scan included
- Everything from the scan
- Complete removal of malicious code
- Restoration of normal operation
- Closing the entry point, changing all access credentials
- Security measures
- Report for the insurance company (+200€)
✓ Money-back guaranteeIf I can't clean the site, you pay nothing.
Ongoing support
per month, plus VAT.
- Updates for core, plugins and themes – checked, not installed blindly
- regular malware check
- Ongoing comparison with newly reported vulnerabilities
- Malware removal included free of charge during the support period
The complete fine print:
- All prices are plus 19 % VAT.
- Orders processed on Saturdays, Sundays or public holidays cost an additional one-time 100 € weekend surcharge.
- Response and recovery times apply Monday to Friday from 8 a.m. to 8 p.m. Outside these hours, I will respond as quickly as I can, but without a guarantee.
- The time starts when I have received all the necessary access credentials – not from your first message.
- I discuss special cases such as multiple sites in one installation, WooCommerce with ongoing orders or multisite with you beforehand and tell you the price before I start.
Frequently asked questions
Do I need to take the shop offline?
Not necessarily. If there are indications that the checkout has been tampered with, I recommend temporarily suspending the payment process. Everything else can generally continue running.
Are credit card details affected?
When payment is processed through an external provider, the data is not stored in your shop, which significantly reduces the risk. However, injected code can still read inputs before they are forwarded. Whether this happened is indicated by the findings.
Does cleaning a shop cost more?
The fixed price of €280 applies in the standard case. For very large shops or complex installations, I will quote the price after a brief review, always before the work begins.
Every hour counts twice for a shop
A call costs you nothing and takes five minutes. If it turns out to be a different problem, I will tell you that too.
Available Monday to Friday from 8 to 20 · Related topics: WordPress hacked – what to do now · Remove WordPress malware · Harden WordPress security · Restore a WordPress website
Prefer a quick chat
The longer an infection remains undetected, the greater the damage usually becomes. Attackers create additional access points, manipulated pages may be marked as unsafe by Google, and domains can end up on spam blacklists. Even after the technical cleanup, it can take time for such warnings to disappear. That's why it's worth checking early whether an infection is actually present. In a short phone call, it is usually possible to assess what has happened and which next steps make sense.
- Malware scan with written findings50 €
- Fixed-price cleanup, scan included280 €
- Ongoing support, monthlyfrom 65 €
All prices plus VAT · Response within 4 hours, Monday to Friday from 8 a.m. to 8 p.m.