my server is hacked

[tzpow2k2]

I just found out my server is hacked and they got all my source code and the database. They even host their own domain with my code with my own logo.

What should I do? Any gov agency that i can report this to? What i should do any suggestions i am totally lost right now.

thanks

[danlefree]

You can report them to the FBI but your best best bet to get them down quickly will be to file a DMCA.

If they have any of your customers' information, there will be a lot more involved as your customers deserve to know whether their information has been compromised.

[wige]

The first question is, did they steal personally identifiable financial information (credit card information, for example) from the database? If so, as Dan said, report them. Although, I would report them to your local office of the Secret Service. As part of the Treasury Department, crimes involving the theft of banking and credit card information are handled by the Secret Service. When reporting things like this to the FBI I am usually given a blank stare followed by "We don't know who handles that."

If they did not steal financial or classified information, I probably would not waste too much time with law enforcement. Investigations rarely lead to prosecution. My first step would be to perform a forensic investigation to determine how the hack was accomplished and to secure the server appropriately. Continuous scans and prompt updates and patches are the best thing you can do - prevention prevention prevention. Then, yes, definitely file the DMCA requests with the hosting company that is hosting your stolen content.

[moneymen]

I agree with wige first thing u should do is examine your website and see how it got hacked,what vulnerability they used.Most of the websites on the net get hacked not because there is allot of good hackers but because there is allot lazy admins which don't know or don't have time to spend on securing their websites.If u don't have time for it there are allot of companies and freelance pentesters which does that thing at low cost.I think its better to pay some bucks to them to secure your website than loose allot more money if your website gets hacked.Don't u think?