A Cygnus Business Services brand[ Incident response ]
Report a security incident
If you think you are under attack, act now. Call us immediately.
// Do this now05
Do this now
- Disconnect affected devices from Wi-Fi and network cables.
- Leave devices powered on (evidence lives in memory).
- Call us, then your cyber insurance carrier if you have one.
- Change passwords from a known-clean device.
- Write down what you saw and when.
// Don’t do this05
Don’t do this
- Don’t pay a ransom or contact the attacker.
- Don’t wipe or restart affected machines.
- Don’t run random “unlock” or cleanup tools.
- Don’t delete suspicious emails, since they are evidence.
- Don’t announce it widely until scope is understood.