🚨 Cyber Incident? Start Here
If you suspect a breach, ransomware, or suspicious activity, follow these steps immediately.
1. Isolate the Issue
- Disconnect affected systems from the network
- Disable Wi-Fi or unplug Ethernet
- Do NOT power off unless necessary
2. Preserve Evidence
- Do not delete files or logs
- Avoid deep investigation
- Preserve system state
3. Contact IT / Security
- Notify IT provider or internal team
- Share what you're seeing
IT / MSP Contact
4. Document the Incident
- What happened and when?
- Which systems/users affected?
- Take screenshots/photos
5. Contact Cyber Insurance
- Notify carrier immediately
- Follow reporting requirements
Insurance Contact
6. Get Guidance
- If unsure, get help before taking action