[ Industry case study — Maintenance & Support ]

Security-breach recovery and a Drupal 7 to 10 rebuild for a photography institution

After the International Center of Photography's Drupal 7 website was breached, Specbee confirmed the site was clean, hardened it and set up proactive monitoring. The team then rebuilt the platform on Drupal 10 and added member portal and community features.

Original project by Specbee ↗Industry reference — not a NexSum Labs engagement.

Client
International Center of Photography
Industry
Non-profit / Arts & culture
Services
Emergency recovery, Security hardening & monitoring, Drupal 7 to 10 upgrade, Member portal & forum, Maintenance
Year
2026
International Center of Photography security recovery case study banner by Specbee
Drupal 7 to 10.6.5
platform rebuilt

The client

The International Center of Photography (ICP) is an institution dedicated to photography and visual culture. Its website ran on Drupal 7, long past end-of-life, when a systems breach affected published content. Specbee ran the engagement in two phases: recovery, then turning the stabilised site into a community platform on a modern Drupal version.

The challenge

ICP's website was running on Drupal 7, long past end-of-life and increasingly exposed to vulnerabilities, when a systems breach hit. Although the incident affected published content and not customer or member data, the site had to be confirmed clean and restored quickly, and the existing infrastructure needed security hardening, scalability and long-term resilience.

The solution

01Emergency triage and hardening

Specbee performed rapid security triage to confirm the website had not been affected, then tightened access controls, patched vulnerabilities and set up proactive monitoring and alerting to prevent a repeat.

02Drupal 10 rebuild

After a full infrastructure and configuration audit, the site was rebuilt on Drupal 10 following best practices, with front-end enhancements added alongside the backend work.

03Community features

A new member portal, user profiles with social features and a community forum turned the stabilised website into a platform for two-way engagement.

04News redesign

The news section was redesigned for better engagement and discovery.

The results

ICP moved from a breached, unmonitored Drupal 7 site to a hardened Drupal 10.6.5 build with proactive monitoring in place. The member portal launched live with profile and social features, and a community forum went live. The news experience was redesigned for engagement.

Tools & stack

Drupal

Original project by Specbee ↗ — published by the delivering agency, included here as an industry reference.

Next case study — Race Forward

Six-plus nonprofit sites unified on one Drupal 11 platform with ongoing maintenance