Diagnosis
Immediate recall: platform, symptoms, payment provider, available access, backups, presence of suspicious orders.
E-commerce emergency — 24/7
Online store hacked — every hour costs you
PrestaShop, WooCommerce, Magento, custom Shopify: remote intervention without breaking the order tunnel.
- Credit card theft script at payment, fraudulent orders, redirects: we identify and remove
- Order tunnel control before service restoration — we don't go back online blindly
- Immediate callback — no commitment, no online payment
Critical incident? Call now+33 7 82 70 38 30
or leave your contact details:
An expert will call you back in under 5 minutes
Describe the incident in one sentence. We'll call you back and tell you what to do immediately — free and no obligation.
150+
audited companies
SINCE 2016
72 h
first response
INCIDENT RESPONSE
1 247
vulnerabilities reported
ALL AUDITS
Included
re-test after correction
ALL OFFERS
Compromised shop
On an e-commerce site, a compromise costs double
First in lost revenue during the incident. Then in trust, if your customers' payment data has been compromised. This is the only type of site where urgency is as much commercial as it is technical.
- A script injected into the payment page can copy bank details without breaking anything on screen.
- Your customers discover unknown charges and trace them back to your store.
- Your payment provider or bank may suspend collections.
- Redirects to third-party sites, €0 orders, unknown administrator accounts, modules installed without your consent.
- Every hour offline during peak commercial season directly translates to lost orders.
This page is for e-merchants and agencies managing stores: PrestaShop, WooCommerce, Magento, or custom development.
Express Intervention
Priority to the Checkout Tunnel
The order of operations is not the same as on a showcase site: we first secure what concerns money and customer data.
Checkout Tunnel
Priority check of cart and payment pages: injected script, altered module, hijacked form, outgoing call to an unknown domain.
Cleanup
Removal of malicious code, backdoors, illegitimate modules and administrator accounts, database check (products, customers, orders).
Relisting & Hardening
Real end-to-end order process test, updates, access hardening, and written summary for your bank or insurer.
While Waiting for Our Call
First Steps Hacked Store
- If you suspect payment data theft, suspend order taking rather than letting it run.
- Notify your payment provider: they can detect and block fraudulent transactions from their end.
- Change administrator, database, FTP, and hosting passwords from a clean workstation.
- Do not restore a backup randomly: it may already contain the backdoor.
- Export the list of recent orders and identify those that are out of the ordinary.
- Keep web server logs and screenshots of observed anomalies.
What our clients say
We don't rate ourselves.
Reviews published on our Google listing by companies that have actually been audited. Verifiable, one by one.
GOOGLE
We hired White-Hat to conduct a cybersecurity audit of all our servers, and we are very satisfied with the quality of their work. Philippe demonstrated professionalism, responsiveness, and excellent communication skills throughout the entire process. The recommendations provided were clear, relevant, and immediately actionable to strengthen our security. We highly recommend their services.
GOOGLE
Excellent experience with White-Hat for a comprehensive security audit of our SaaS platform. The quality of service was truly outstanding: Philippe took the time to understand our application's architecture before starting the tests, which made all the difference to the relevance of the results. The report was detailed, with vulnerabilities categorized by criticality, concrete evidence of exploitability, and recommendations directly applicable by our technical team. The post-delivery follow-up to verify the patches was a real bonus. Professional, rigorous, and attentive: exactly what you need to secure a SaaS product.
GOOGLE
We hired White-Hat for a comprehensive audit/advanced penetration test on our website, and it's clearly the direct contact with Philippe that makes all the difference. No salesperson between us, no unnecessary jargon: we communicate directly with someone who understands our challenges and can clearly explain the vulnerabilities found. The report was precise, with concrete evidence and recommendations that we were able to implement quickly. A truly trustworthy relationship; I highly recommend them.
GOOGLE
Professional work. Thank you.
GOOGLE
We urgently contacted White Hat following a suspected compromise of several servers. The team was extremely responsive and addressed our request within minutes, with clear communication at every stage. Their vulnerability analysis was conducted very rigorously, resulting in a detailed report and concrete, easy-to-implement recommendations to strengthen our security. The investigation of the compromised servers allowed them to quickly identify the source of the attack and contain the incident without any major disruption to our services. Professional, knowledgeable, and readily available, I highly recommend this provider for any cybersecurity intervention, especially in emergency situations.
Scope
We Intervene On
E-commerce Compromises
Payment card skimming script, altered module or theme, backdoor, redirects, SEO spam, fraudulent orders and accounts, exposed customer database.
Platforms
PrestaShop, WooCommerce, Magento, OpenCart, and custom-built stores. Remotely via FTP/SFTP, hosting panel, or server access.
Out of Scope
No full PCI DSS compliance, no graphic redesign or functional development during the emergency phase. Reimbursement of fraudulent transactions is handled by your bank.
Dedicated Contact
Philippe Bécué e-commerce & payment
An obsolete PrestaShop module, a WooCommerce theme bought from a shady marketplace, a forgotten administrator account: stores almost always fall through these. Philippe Bécué intervenes without breaking the checkout tunnel, checks payment data first, and tests a real order process before declaring the store back online.
FAQ
Hacked Store
Should the store be closed during the intervention?
If the payment gateway is affected, yes: continuing to collect payments while a script is capturing card details worsens the situation. If the compromise is limited to display issues or SEO spam, the store can often remain open during the cleanup.
How do I know if credit card details have been stolen?
By searching for injected code on payment pages and outbound traffic to unknown domains. We determine what was captured and over what period, which dictates your obligations to your customers and your payment processor.
Are my orders and customers preserved?
That is the priority. Cleanup focuses on malicious files and code, not your business data. We verify the database before and after intervention to ensure the integrity of products, customers, and orders.
Do you work with my agency?
Gladly. Many calls come from web agencies that manage the store and lack in-house security expertise. We handle the incident, and they maintain the client relationship and future project management.
Act
Hacked Store — get a callback now
Describe the incident in one sentence. We'll call you back and tell you what to do immediately — free and no obligation.
Free, confidential, no obligation — no online payment.