Suspected data breach?
If data was encrypted, leaked or accessed without authorization, a calm and documented first response matters. This page summarizes immediate steps and contact options.
Immediate checklist
Work through these steps in order and only change affected systems when your IT or incident-response team instructs you to do so.
- 1
Stay calm
Do not delete or change systems in panic. Preserving evidence matters.
- 2
Disconnect affected devices
Remove affected devices from LAN or Wi-Fi to limit spread.
- 3
Inform IT or helpdesk
Call your IT team or security owner immediately.
- 4
Do not repair alone
Uncoordinated fixes can destroy evidence or make recovery harder.
- 5
Document what happened
Record time, screenshots, messages and visible indicators.
Classify the incident confidentially
We help structure the situation, coordinate next steps and avoid unnecessary changes to affected systems.