August 28-29 incident:
Some orders and payments from around 28 August are still being restored — read the incident report, or contact support if something of yours is missing. You will be asked to choose a new password at your next sign-in.
Protect WordPress from brute force attacks ..
Add captcha and limit login attempts wp-admin and block IP temporarily .
It is very easy, Just install wp-limit-login-attempts plugin
https://wordpress.org/plugins/wp-limit...