Here’s what happened:
1. We were getting reports of a malware infestation. I subscribed us to a website malware monitoring and removal service, and supposedly the malware has been removed, and the site has been “hardened”. We shall see.
2. Google now thinks we are a malware site. I told them to check again but it takes a few hours for them to be convinced we’re OK. That’s why everyone’s Chrome turns red (seemingly at random) and shows a picture of a burglar when they visit the site.
3. As part of the cleanup, 2 months of images got deleted. We won’t go into why other than to mention that general stupidity and a comedy of errors and hardware failures were involved. So, some posts that used to have pictures no longer have pictures.
WordPress has a history of issues with malware. I thought we had things configured to avoid that, but obviously I was wrong.