We have a multisite

Hello,

We have a multisite server and many blogs have been deleted out of nowhere. I have been in contact with someone who responded to me once but it has been well over 24 hours and have not heard a reply from them. I have copied and pasted our conversation below. This is quite an urgent and stressful situation. There are hundred of hours our teacher have put into their blogs and they are just gone with no explanation. Can someone please respond to me and let me know what is going on.

The blogs that we know of so far who are deleted are:
http://blog.cisb.com.cn/dhalgrenattwell/
http://blog.cisb.com.cn/josephcreelman/
http://blog.cisb.com.cn/msameliza/
http://blog.cisb.com.cn/msmackenzie/
http://blog.cisb.com.cn/jessohanley/
blog.cisb.com.cn/amandazhang/
http://blog.cisb.com.cn/michelleliu/

Thank you,
Sarah

Previous conversation:
There are many sites in the multisite network that have been deleted. This is very worrisome to us as our teachers have been creating and adding to these websites all year and have a lot of information on them. Do you have any idea what might have happened?

They are subsets on a multisite network and I do not believe they have not backed up in any way.

http://blog.cisb.com.cn/dhalgrenattwell/
http://blog.cisb.com.cn/josephcreelman/
http://blog.cisb.com.cn/msameliza/
http://blog.cisb.com.cn/msmackenzie/
http://blog.cisb.com.cn/jessohanley/

Thanks

Hi Sarah,

So sorry to hear the inconvenience you are having. This is really weird and should not happen.

Do you have any guessing regarding when this happened? Can you please ask your host for the server access log of that time period? Also ask them if they find any suspicious activity on your site during that time.

Just to confirm that your site is not compromised, can you please try securing your site with our Defender plugin?

I could try to find out any clue if I had Support Access enabled. Would you mind allowing Support Access so we can have a closer look at this?

To enable support access you can follow this guide here:
http://premium.wpmudev.org/manuals/wpmu-dev-dashboard-enabling-staff-login/

Please let us know what your hosting company says about server access log and confirm here when you are done granting Support Access.

I'm looking forward to hearing from you and resolving this issue as soon as possible.

Have a nice day. Cheers!
Rupok
Hello,

I do not know what you mean when you ask "Can you please ask your host for the server access log of that time period?" Who do I ask for the information or how can I find it.

I have tried grant you Support Access but after following the instructions on the website you provided there is no option in Network Admin for WPMU DEV

No, I have no idea how this happened. This is actually quite an urgent matter. There are many teachers why have spent countless hours on their blogs that are now just gone!

I contacted my IT department and they said that the log was too bog to send (over 12 Gbs). They also informed me that we have our own defender: Wordfence.

They are also helping me grant support and I will let you know when it is done.

If in the meantime you can give me any information on how long this will take to get fixed, what caused it etc. that would be great. Our teachers are getting pretty anxious!

thanks,
Sarah
Hello again,

Ok, we have granted the access for support.

Sarah