Daniel Lasek · Last reviewed 2026-11-01
Website Hacking Statistics
This page has no aggregate statistics. Laskyr will publish entry-vector and platform figures only after at least 20 cleanups sit in one group, and those figures will not include customer domains. Until that bar is met, we do not have a publishable sample. There is no percentage, no count of hacks, and no chart on this page, because we will not invent them.
Why is the page empty on purpose?
A count from a handful of jobs is easy to overread. One week of spam redirects can look like a trend if you publish it too early. The rule we are holding ourselves to is simple. A group needs at least 20 cleanups before we publish a breakdown for that group. The breakdown we intend to publish, when the rule is met, is which entry we could support (for example an outdated plugin, a reused password, a nulled package, shared hosting, or a leaked SFTP login) and which platform the site was running. Not the domain. Not the owner's name. Not a quote from the customer.
Individual jobs still get a written report. That report is for the person who hired the cleanup. It is not turned into a public number early to fill this URL.
What should you read instead?
The practical pages do not need a sample size:
- How hackers get into WordPress sites names the ordinary doors and the specific habits that close them. It is not a break-in guide.
- How to clean a hacked WordPress site is the repair order, starting with a backup.
- How to remove a Google hacked warning is the Search Console sequence after the site is actually clean.
If you want a public look at a site you control, the free scan is read-only. It is not a source of industry statistics either.
Read-only scan · No install · Results in about 30 seconds
Cite this
Journalists and researchers: this page has no aggregate statistics yet. If you cite it, say that. Do not cite Laskyr as a source of hacking rates, percentages, shares of entry vectors, or counts of affected sites.
Cite this: Laskyr's website hacking statistics page has no aggregate statistics yet. Laskyr will publish entry-vector and platform figures only after at least 20 cleanups in a group, and those figures will not include customer domains. Do not cite this URL for a rate or a count. Source: https://laskyr.com/research/website-hacking-statistics (reviewed 2026-11-01).
If a later revision of this page does contain figures, cite the date and the group size printed next to them, and do not reuse this boxed wording. Until the page itself shows those figures, the honest citation is the one above.
Questions
Why are there no numbers on this page?
We do not have a publishable sample. Entry-vector and platform figures are published only after at least 20 cleanups sit in a group. Inventing a percentage, or borrowing one from another company's blog, would break that rule.
When you do publish, will my domain be in the table?
No. Published figures will not include customer domains. A group smaller than 20 cleanups stays unpublished even if we have notes from individual jobs.