REPORT A BREACH

Emergency Incident Response

If you've had a security breach and need immediate assistance, call us on the hotline numbers listed at the top of the page, or chat, email, or schedule an appointment below

Immediate tips

• Stay calm, and take clear notes of everything you've seen.
• If you suspect accounts have been compromised, change passwords and implement Multi-Factor Authentication (MFA) as soon as possible.
• If you suspect a ransomware attack, get a copy of any note or demand, and take note of any new filename extensions.
• If you suspect a machine is compromised, disconnect it from the network but don't turn it off.
• Don't delete or rebuild servers: replace, or take a low-level copy/image first.
• If you have cyber insurance, notify your insurers.