How many business websites have been hacked near you?
We read business websites area by area, the way any visitor or search engine sees them, and count the ones that show signs of a compromise. Every figure is dated, and no business is named.
487,492business websites readA further 127,702 could not be read, and are left out of every share
850showed signs of a compromise0.2% of the websites read
1,637had changed hands0.3% of the websites read
City by city
The cities where the highest share of business websites showed signs of a compromise, by country, highest first. A city's name opens its own report; a country's page lists all of its cities.
Sorted by share, highest first. Each share is of the websites read in that city. Showing the 12 with the highest share; see all 25 cities in Australia. Being read now, too few to report on yet: Abbotsford, Agnes Water, Airlie Beach, Albany, Albion Park Rail, Albury, Alexandria, Alice Springs, Alstonville, Ararat, Armidale, Artarmon, Arundel, Atherton, Auburn, Ayr, Bacchus Marsh, Bairnsdale, Balcatta, Ballina, Bangalow, Bankstown, Batemans Bay, Bathurst, Baulkham Hills, Bayswater, Bayswater, Beaudesert, Beechworth, Beerwah, Bega, Belconnen, Bella Vista, Bellingen, Bells Creek, Belmont, Belmont, Benalla, Beresfield, Berri, Berry, Bibra Lake, Blackheath, Blacktown, Blaxland, Bomaderry, Bondi Junction, Boronia, Botany, Bowen, Bowral, Box Hill, Braeside, Brendale, Bribie Island, Bright, Brighton, Broken Hill, Brookvale, Broome, Brunswick, Buderim, Bundaberg, Bundall, Bundoora, Burleigh Heads, Burnie, Busselton, Byron Bay, Caboolture, Camberwell, Cambridge, Campbellfield, Campbelltown, Canning Vale, Cannonvale, Capalaba, Cardiff, Caringbah, Carrum Downs, Casino, Castle Hill, Castlemaine, Cessnock, Charters Towers, Chatswood, Cheltenham, Chinchilla, Clare, Cleveland, Cobram, Coburg, Coffs Harbour, Colac, Collingwood, Coolum Beach, Cooma, Coopers Plains, Cooroy, Corowa, Cowes, Cowra, Crows Nest, Dalby, Dandenong, Dandenong South, Darlinghurst, Daylesford, Deniliquin, Denmark, Devonport, Docklands, Dromana, Drouin, Drysdale, Dubbo, Dunsborough, Echuca, Emerald, Epping, Esperance, Eumundi, Exmouth, Fitzroy, Footscray, Forbes, Forster, Fortitude Valley, Frankston, Fremantle, Fyshwick, Garbutt, Gateshead, Gatton, Gawler, Geraldton, Gerringong, Gisborne, Gladesville, Gladstone, Glen Innes, Goolwa, Goondiwindi, Goulburn, Grafton, Griffith, Gungahlin, Gunnedah, Gympie, Hahndorf, Hallam, Hamilton, Hastings, Hawthorn, Healesville, Hervey Bay, Highfields, Hoppers Crossing, Hornsby, Horsham, Huskisson, Ingleburn, Innisfail, Inverell, Inverloch, Jerrabomberra, Jindabyne, Kalgoorlie, Karratha, Katoomba, Kempsey, Kew, Keysborough, Kialla, Kiama, Kilmore, Kingaroy, Kingscliff, Kingston, Kogarah, Kununurra, Kyabram, Kyneton, Lakes Entrance, Lane Cove, Lara, Leeton, Leichhardt, Lennox Head, Leongatha, Leura, Lidcombe, Lismore, Lithgow, Liverpool, Loganholme, Maitland, Malaga, Maleny, Malvern, Manjimup, Manly, Mansfield, Mareeba, Margaret River, Maroochydore, Marrickville, Maryborough, Maryborough, Mascot, McLaren Vale, Medowie, Melton, Merimbula, Mildura, Milton, Miranda, Mittagong, Moama, Moe, Molendinar, Mona Vale, Moorabbin, Moree, Morisset, Mornington, Moruya, Morwell, Mosman, Moss Vale, Mount Barker, Mount Gambier, Mount Isa, Mount Martha, Mount Waverley, Mudgee, Mulgrave, Mullumbimby, Murarrie, Murray Bridge, Murwillumbah, Muswellbrook, Nambour, Nambucca Heads, Naracoorte, Narooma, Narrabri, Narre Warren, Nedlands, Nelson Bay, Nerang, Neutral Bay, Newstead, Newtown, Noosaville, North Melbourne, North Ryde, North Sydney, Northam, Northcote, Notting Hill, Nowra, Nuriootpa, O'Connor, Oak Flats, Oakleigh, Ocean Grove, Orange, Ormeau, Osborne Park, Paddington, Pakenham, Palmerston, Palmwoods, Parkes, Parramatta, Penrith, Picton, Point Cook, Pokolbin, Port Augusta, Port Douglas, Port Fairy, Port Hedland, Port Lincoln, Port Melbourne, Port Pirie, Portland, Prahran, Preston, Prestons, Pyrmont, Queanbeyan, Randwick, Raymond Terrace, Reservoir, Richmond, Richmond, Ringwood, Rockhampton, Roma, Rosebud, Rowville, Rye, Salamander Bay, Sale, Sawtell, Scone, Seaford, Seven Hills, Seymour, Shellharbour, Shepparton, Silverwater, Singleton, Smithfield, Somerville, South Melbourne, South Murwillumbah, South Yarra, Southbank, Southport, Spring Hill, Springwood, St Kilda, St Leonards, Stanthorpe, Stirling, Strathalbyn, Subiaco, Sunbury, Sunshine, Surfers Paradise, Surry Hills, Swan Hill, Tamborine Mountain, Tamworth, Tanunda, Taree, Thomastown, Thornton, Toronto, Torquay, Traralgon, Truganina, Tuggerah, Tuggeranong, Tullamarine, Tumut, Tuncurry, Tweed Heads, Ulladulla, Ultimo, Ulverstone, Unanderra, Underwood, Varsity Lakes, Victor Harbor, Wagga Wagga, Wallan, Wangara, Wangaratta, Warners Bay, Warragul, Warriewood, Warrnambool, Warwick, Wauchope, Welshpool, Werribee, West Gosford, West Perth, Weston Creek, Wetherill Park, Whyalla, Windsor, Woden Valley, Wodonga, Wonthaggi, Woodend, Woolgoolga, Yamba, Yandina, Yarrawonga, Yass, Yatala, Yeppoon and Young.
What the two counts mean
Two different things can be wrong with a business's web address, and they need different things doing, so we count them apart.
Compromised
Showed signs of a compromise
The business's own website is still there, but spam or code has been slipped onto it, almost always hidden from the owner. We count it only when we find it on the business's own domain, on a page anyone can open.
Changed hands
Changed hands
The address no longer serves the business it was listed for. That is usually a domain that lapsed and was registered by someone else. We count it apart from the compromised, and we never call it a hack.
How we read
Every figure on these pages comes from what any visitor and a search engine can see of a business's website, read on the dates shown.
Which websites. The websites of the businesses on Overture Maps, an open map of places, in each area we report on.
What we read. Each website's home page and, on a WordPress site, the public list of pages it publishes, as any visitor or search engine reads them. It is the same reading as our free website check: see what the check reads.
What we never do. Log in, try a password, send a form or change anything on a website.
No business named. These pages count; they never say which business. An area is reported only once enough of its websites have been read to count honestly.
Could not be read. A website we tried and could not read is counted on its own and left out of every share. We never call it clean.
Dated. Every figure carries the days its websites were read between. A site can be cleaned, or broken into, the day after we read it.
Quoting a figure. Link to the area's page and give the dates its websites were read between.
If your website might be one of them
Plain steps from our guides, before you spend anything.
My website has been hacked: what to do in the first hour
Calm, ordered steps you can follow today, in the order that keeps the damage small.