Did This Website Get Hacked?

The website was broken into in late September and early October 2026. Here is what that means for you.

Have I been hacked?

• If you do not have a login for this website, your personal accounts were not broken into by this attack.
• If you left a comment on this website, your name, email address, and anything else you typed into the comment form may have been seen by the attacker. There is no proof that they copied it, but it cannot be ruled out.
• If you opened this website between September 29 and October 6, 2026, hidden computer code on some pages may have run in your web browser. To be safe, run a full antivirus scan on your computer and update your browser.
• If you have a login for this website, the password was changed as a precaution. You will need to ask the site owner for a new one before you can sign in again.

If you left a comment or have a login on this website, assume your email address may be known to people you don't know. Email addresses were never shown on this website, and there is no proof that anyone copied them, but that cannot be ruled out. Be extra careful with unexpected messages. Don't click links or send passwords, banking details, or personal information in response to an email. If in doubt, contact the sender another way first.

What happened

Someone found a way to get into the website's administrator controls. They used those controls to:

• Add hidden code to about 330 pages and old drafts. When someone opened one of those pages, the code tried to download a program from another website. The pages also contained hidden links to unrelated websites, such as gambling and vaping shops.
• Install hidden files that would have let them control the website remotely. These were removed.
• Change the website's design files to add a file-upload form. These were restored from clean copies.
• Try to install new software on the website. Nothing was installed.

The attacker was first seen on September 22, 2026. Some fake administrator accounts were created as early as July 2026. The site owner does not yet know how the attacker got their first password.

What was done

• Removed all of the hidden code and hidden files.
• Restored the website's design files from clean copies.
• Turned off the fake administrator accounts.
• Changed every password on the website, except for the site owner's, which was also replaced.
• Changed the database password and the keys that keep people signed in.
• Turned off the features the attacker used to change the website's files.
• Blocked the internet addresses the attacker used.
• Added a limit on how often someone can try to sign in.
• Turned off an older file-transfer service that was another way in.
• Set up automatic checks every four hours.

What is not yet known

• How the attacker first got a password.
• Whether the attacker copied any information from the website. There is no proof either way.
• Who made an unexplained set of changes to 11 posts on October 5, 2026. The site owner did not make those changes.