Hello world! – vicits.com

Do these four things right now

Don't switch devices off. Unplug the network cable or turn off Wi-Fi instead. Powering off destroys evidence we need.
Don't pay, reply to, or negotiate with the attacker. Leave that to us.
Assume your email is being watched. Talk about the incident by phone or from a personal device.
Write down what you saw and when. Take photos of screens, ransom notes or error messages.

What best describes what's happening?

RansomwareFiles encrypted, ransom note, systems locked Compromised emailOdd emails sent from us, invoice fraud, phishing clicked Account takeoverLocked out, password changed, unknown sign-ins Data breachData leaked, extortion threat, unusual data transfer Website down / DDoSSite or services flooded, defaced or unreachable Not sureSomething feels wrong. That's reason enough to report it.

Help us size the response

Is it still happening?

Yes No / contained Don't know

How much is affected?

One device / user Several Widespread Don't know

Can the business operate?

Normally Partly Stopped

What have you done so far? (optional)

Disconnected devices Reset passwords Powered devices off Called insurer Reported to police Restored from backup Paid / contacted attacker

How do we reach you?

We'll phone you. If your email may be compromised, give us a personal address or none at all.

Your name

Organisation

Callback number

Safe email (optional)

Anything else we should know? (optional)

P1

Received. A responder has been paged.

Reference · call-back target

Now The on-call responder is reviewing your report.
Call-back We phone to triage and agree on containment.
Contain We isolate affected systems and accounts, remotely where we can.
Recover Forensics, a clean restore, and a report for your insurer or regulator.

While you wait:

Haven't heard back? Call now