All My CyberPanel Servers Hacked

All my CyberPanel servers hacked and my files at /home directory encoded
please help me

This is the hacker message

prepare 1 btc .contact email:[email protected],if you can’t contact my email, please contact some data recovery company(suggest taobao.com), may they can contact to me .your id: TTTk7jgdt0…

Check out the Twitter account of leak_ix. They have a decrypter ready. If you have the encryption keys in your /var folder then you can decrypt it.

Is /run directory for hacker?

How can I check if the server has been attacked or not?