Getting back to normal.
WHAT TO DO IN ORDER
Verify the site is clean Remove any maintenance page Check every page works Check forms and checkout Check email Request search review, if flagged
WHAT TO CHECK
That all content is present That nothing was lost in cleaning That plugins and settings survived That integrations still work
WHAT FREQUENTLY BREAKS
Settings lost when files were replaced Integrations with regenerated keys Custom code removed with malicious code
THAT LAST ONE
If custom modifications were in files you replaced, they are gone.
Restore them from your backup, after checking.
WHAT TO SET UP IMMEDIATELY
Updates, all of them Two-factor authentication Backups, if you had none Monitoring
WHAT TO DO ABOUT SEARCH VISIBILITY
It may take time to recover.
Submit your sitemap and monitor indexing.
WHAT TO WATCH
For the compromise returning.
