Freelancer hijacks company website to force payment, posts “pay me to get access” message

Freelancer hijacks company website to force payment, posts “pay me to get access” message

• Freelancer altered CodeStable's site with a protest message over payment delays.
• The incident highlighted risks of lingering access privileges for contractors
• CodeStable audits systems, seeks legal resolution with developer.

Did our AI summary help?

The trouble began with CodeStable Ltd, a small software firm based in Manchester, and a freelance developer who had been contracted to build part of the company’s website. According to local tech news sources, the developer completed the agreed work but said the company failed to pay all outstanding invoices on time. Rather than taking the matter to court or a dispute service, the freelancer used credentials they still held to log into the firm’s hosting account and change the main page content to a blunt message: “If you need access, pay me.”

Visitors to the firm’s site were met with the message for several hours on January 9, 2026, before CodeStable regained control. The developers’ action drew immediate attention on social media and in industry forums, with posts quickly circulating screenshots of the takeover. Security experts described the incident as a “modern form of protest,” drawing comparisons to online ransom tactics, though in this case no encryption or traditional malware was used.

Local reports indicate the worker felt justified in his approach because repeated requests for payment had gone unanswered. CodeStable officials, speaking anonymously to the press, conceded there had been a disagreement over the timeline for settlement but said the contractor’s behaviour was unprofessional and harmful to the company’s reputation.

Cybersecurity specialists say the incident shows how lingering access privileges pose risks to organisations. In many freelance and contractor arrangements, developers retain administrative access to servers, content management systems, or hosting accounts for ease of updates. If those privileges are not revoked promptly after a contract ends, it can allow former workers to make unauthorised changes or worse.

Legal analysts consulted by local media noted that the freelancer’s actions could expose him to charges under UK computer misuse laws, which make it an offence to access or modify computer material without proper authorisation. Even if the original contract was in dispute, taking unilateral control of a live business site can jeopardise one’s own legal standing.

Following the incident, CodeStable said it had brought in an IT security consultant to audit its systems and improve access controls. The company also said it has begun talks with the contractor to resolve the payment issue through proper legal channels.

Industry commentators have weighed in, suggesting that while late or withheld payments are a serious problem for many freelancers, there are established dispute resolution services that should be used rather than “digital self-help.” The chaos on CodeStable’s homepage may have been a strong message, but it also underscored the risks when tech access and payment disputes collide in public view.