Contain
We isolate affected devices and accounts, reset access and stop the attack from spreading.
Cyber Security
Hacked or think something's wrong? We can help.
If you have been hit by ransomware, a hacked mailbox or a compromised website, act quickly. Our team helps you contain the problem, find out what happened and get back to work safely.
- Ransomware and malware
- Email account compromise
- Hacked websites
What's included
How we respond
Investigate
We look at logs and systems to understand how the attacker got in and what they accessed.
Recover
Clean systems are restored from backups, websites are cleaned and hardened and email is secured.
Report
We help you decide whether to report the incident to the ICO, Action Fraud or your insurer. You also get a clear written summary.
Prevent
Once you are back up and running, we close the gaps so it does not happen again.
Incident response plans
Not been attacked? We can write a simple response plan now so your team knows exactly what to do if it ever happens.
Questions
Common questions
What should I do first if I think we've been hacked?
Disconnect affected devices from the network but leave them switched on, change passwords from a clean device and call us. Avoid deleting anything, as it may be needed to understand what happened.
Should we pay a ransom?
The NCSC and UK law enforcement advise against paying. Payment does not guarantee you get your data back. Good backups are the best protection.
Do we need to report a data breach?
If personal data has been affected and there is a risk to people, UK GDPR usually requires you to report it to the ICO within 72 hours. We can help you assess this.
Works well with