In case of an attack, promptly inform your hosting provider, remove inactive users, strengthen passwords, and reach out to a security professional if needed.