How many websites are hacked each day?

How to get close to this number

Work from the population of vulnerable sites. There are hundreds of millions of active websites, a large share run outdated content management software, and automated scanners probe every reachable address continuously. A small daily compromise rate across that population gives tens of thousands.

The mechanism in the explanation is the part that matters: the overwhelming majority fall to outdated plugins or weak passwords rather than sophisticated attacks. Compromise is a volume business run by scripts, not a targeted operation, and the attacker never knew the site existed before the scanner found it.

That is why most victims are small sites nobody targeted. Security for an ordinary website is not about resisting a determined adversary; it is about not being the easiest target a script encounters. Keeping software current and passwords strong removes you from the population these numbers describe, which is why this site ships as static files with no database and no admin login.