I back my blogs regularly using a free plugin WP DB Backup up. If anything happens I will restore my website to the last settings. I use WP Security Scan free plugin to scan my site and WordPress Firewall to block requests that are suspicious-looking to fix malware problems free.
Don't make the mistake of thinking that your web host will have your back as far as WordPress backups go. Not always. It has been my experience that the company may or might not be doing proper backups while they say that they do. Take that kind of chance?
Recently, an unknown hacker murdered the blog of Reuters and published a news article. Since Reuters is a news website, their reputation is already ruined due to what the hacker did. In the event you don't pay attention on the security of your WordPress 20, the same thing may happen to you.
BACK UP your website and keep a copy on your computer and storage. For those who have a website that is very active, back up daily. You spend a whole lot of time this and money on your website, do not skip this! Is BackupBuddy, no back up widgets your documents, database and plugins. Need to move your website to another server, this will do it!
Implementing all of the above will probably take less than an hour to complete, while creating your WordPress site more immune to intrusions. Over 1 million WordPress sites were last year, mainly due to easily preventable security gaps. Have yourself prepared and you are likely to be on the safe side.