Reconstructed everything from backups following security incident (firewall restrictions dropped for approx 4-6 hours). Appears regular (non-firewall) security measures did their job & no compromises detected following review but for safety & 100% confidence all components have been restored from clean backups, preparing to swap out production with replacement.