---
title: "Further actions"
manual: "TYPO3 Explained"
version: "12.4"
permalink: "https://docs.typo3.org/permalink/t3coreapi:security-further-actions@12.4"
source: "Security/HackedSite/FurtherActions.rst"
rendered: "2026-10-21T15:29:37+00:00"
---

> [!WARNING]
> **Attention**
>
> TYPO3 v12 has reached end-of-life as of April 30th 2026 and
> is no longer being maintained. Use the version switcher on the top
> left of this page to select documentation for a supported version of TYPO3.
>
> Need more time before upgrading?
> You can purchase Extended Long Term Support (ELTS) for TYPO3 v12 here:
> [TYPO3 ELTS](https://typo3.com/services/extended-support-elts).

# Further actions {#security-further-actions}

Given the fact that the TYPO3 site is now working again, is clean and
that the security hole has been identified and fixed, you can switch
the website back online. However, there are some further things to do
or to consider:

-   change (all) passwords and other access details
-   review situation: determine impact of the attack and degree of damage
-   possibly notify your hosting provider
-   possibly notify users (maybe clients), business partners, etc.
-   possibly take further legal steps (or ask for legal advice from
    professionals)

Depending on the nature of the hack, the consequences can be as
minimal as a beautifully "decorated" home page or as extensive as
stolen email addresses, passwords, names, addresses and credit card
details of users. In most cases, you should definitely not trifle with
your reputation and you should not conceal the fact that your site has
been hacked.