life of
dr. mom

I Got Hacked: A Doctor’s Hard-Learned Cybersecurity Lessons

I’m Dr. Stephanie Liu, but many of you know me as Dr. Mom. Today, I’m writing something I never imagined I would have to. I’m embarrassed, frustrated, and honestly, still a bit in shock. I let myself get hacked.

For years, I’ve prided myself on being cautious online. I’ve warned my own family about suspicious links and scam emails. Yet, here I am, telling you that I fell for one. My Facebook Page, a community I have poured my heart and soul into for the past four years, was stolen by a hacker.

I’m sharing my story—the raw and painful details—for one simple reason: I don’t want this to happen to you. It’s an awful experience, and if my mistake can help protect even one person, then it’s worth laying my pride aside.

How It All Unfolded

It all started about 36 hours ago. An email landed in my inbox that looked like it was from Facebook. The sender’s address appeared legitimate, and the message asked me to verify my account. I was tired, wrapping up a long day, and my guard was down. Seeing what I believed was an official Facebook email, I didn’t think twice.

I clicked the link.

The page it took me to looked like an authentic Facebook login screen. I entered my password. Then, it asked me to input a code that appeared on my Facebook page. I did. Within five minutes, a notification popped up: someone was trying to log in from Pakistan.

My stomach dropped. I knew instantly that I had made a huge mistake. I immediately clicked the “This was not me” button, thinking that would be enough to block the intruder. For the next four hours, everything seemed normal. I finished up at the clinic, picked up my kids, took them to Karate, and we even went for a swim. We had a great evening.

On the drive home, my world turned upside down. I received a message from Facebook stating that a page named “Kagisoo KG official” now had access to my professional Facebook page. Panic set in. My mind started racing, thinking of the 90,000 followers who trust me and the community we’ve built.

The Fight to Get It Back

I immediately contacted Facebook support. To my surprise, I was connected with a real person within 30 minutes, even though it was around 11 PM. They were reassuring and told me they would open an investigation.

That night, I barely slept. My mind was a whirlwind of “what ifs.” I woke up at 5 AM and checked my email, only to find my worst fear had come true. I was completely locked out of my Facebook page. The hackers had taken full control. I couldn’t even log into my personal Facebook account anymore.

Feeling helpless, I remembered some excellent advice from one of my followers: try contacting Instagram support. Since I still had access to my Instagram account (which is linked to Facebook), it was worth a shot.

The advice was a lifesaver. Instagram support was incredibly helpful. Within 15 minutes, I was speaking to a support agent who filed an internal report. They were able to restore access to my personal Facebook account, which was a massive relief. Unfortunately, they couldn’t immediately get my professional page back, but they assured me the case was active and being worked on.

As I write this, it’s been 36 hours. The investigation is ongoing, and the fate of my page is still uncertain. But this harrowing experience has already taught me three profound lessons.

Three Truths I Learned from Being Hacked

This ordeal has been a crash course in cybersecurity and a stark reminder of what truly matters. I’ve come to three very clear conclusions that I want to share with you.

1. Never Click When You’re Tired or Unsure

This is my biggest takeaway. I was at the end of a long workday, my mental energy was low, and I wasn’t thinking as clearly as I normally would. That’s when I made the mistake. Hackers are sophisticated. They create convincing emails and fake login pages that can fool even the most careful person.

Please, learn from my error. If you receive an email asking you to verify an account or click a link, take a moment. Pause. If you are tired, distracted, or have any doubt at all, do not click. Close the email and come back to it later when you are fresh. Better yet, go directly to the website in your browser and log in there instead of using a link from an email.

2. The Real Fear Isn’t Losing Followers—It’s Losing Trust

When I realized my page was gone, my first thought wasn’t about the number of followers I stood to lose. It wasn’t about the years of work or the business impact. My biggest fear was, and still is, that these hackers could use my platform to harm the very people who have put their trust in me.

You have trusted me with your questions, shared your stories, and allowed me to be a part of your lives. The thought that a hacker could post malicious links, share dangerous misinformation, or scam my followers under my name is what keeps me up at night. Your safety and trust are my top priorities, and the potential for that to be violated is what hurts the most.

3. Your Real-Life Relationships Are Your Greatest Asset

Social media is a powerful tool for connection, community, and business. But this experience has been a brutal reminder that it can all disappear in an instant. Your accounts, your followers, and your online presence are fragile.

What isn’t fragile are the relationships you build in the real world. Your family, your friends, your colleagues—these are the people who will support you when your digital world comes crashing down. Through this stressful time, the support from my husband, friends, and even my followers through other channels has been my anchor. Always invest in your personal, real-life relationships. They are your true safety net.

I’m still waiting and hoping for the best. I will keep you all updated on the situation. Thank you for your support, and please, stay safe out there.