From reading what has been said it’s still not been established if this was a script exploit or a number of login attacks or the hacker simply logging into your account.
Often I have seen on the various support roles I have taken for numerous companies, that users are almost immediately ready to hand the blame to them. In some cases this is helpful as it allows the provider to being investigation although not always.
With the recent attacks on WHT, you have to ask yourself some simple questions:
- Did I have an account? Yes or No
- Do I use generic or similar passwords (example: yourname234, and for another site yourname345)? Yes or No
- Is my computer correctly secured and updated and have any breaches been made? Yes or No
- Am I using freeware or shared antiviral or firewall software? Yes or No
- Are scans run regularly?
Those are just a few questions, there are obviously many more but many people may have dormant or inactive viruses on their computers in places that the software they use cannot access. I have been victim to this and as have many people before, which require removal by hand as it where.
I’d like to make it clear I am in no way saying it’s your fault, but everyone always presumes it’s a breach on the provider’s side. And yes they cannot monitor everything especially if someone is using your ftp or cPanel accounts, although brute force attacks should be known as well as others such as DDOS which can result in breaches. Although their history doesn’t help.
Again there are so many different ways of getting into website, scripts, applications, games, servers, computers and the likes it’s not always a simple case of, the hacker got in here and did this there.
As far as the response times go, they are pretty appalling although not the worse if seen across many industries. At a minimum they should post updates, but again if they have a history of hacking issues and your experiencing bad support id go with the suggestion to change host.
Again the security of your data should be paramount which is why I suspect many of us use PayPal, Google Checkout and the like for payment , SSL certs for when personal info is taken as well as database precautions. Although if they have your password through an exploit or otherwise then these precautions will be almost useless.
Just my :twocents: worth.