Author: wpadmin

Do these four things right now

1. Don't switch devices off. Unplug the network cable or turn off Wi-Fi instead. Powering off destroys evidence we need.
2. Don't pay, reply to, or negotiate with the attacker. Leave that to us.
3. Assume your email is being watched. Talk about the incident by phone or from a personal device.
4. Write down what you saw and when. Take photos of screens, ransom notes or error messages.

What best describes what's happening?

Help us size the response

How do we reach you?

We'll phone you. If your email may be compromised, give us a personal address or none at all.

1. Now The on-call responder is reviewing your report.
2. Call-back We phone to triage and agree on containment.
3. Contain We isolate affected systems and accounts, remotely where we can.
4. Recover Forensics, a clean restore, and a report for your insurer or regulator.