Think you have a cyber incident?
Ransomware, a suspicious login, business email compromise, wire fraud, or a possible breach - the first few decisions matter most. If you carry cyber insurance, call your insurer’s breach line first. If you have no policy or are unsure, start with us.
What to do first
If you carry cyber insurance
Call the breach or incident line on your policy first. Insurers require their approved response partners, and calling other vendors first can put your coverage at risk. Preserve evidence and avoid changing systems until they guide you.
If you have no policy or are unsure
Reach our business-hours line. We help you triage the situation, protect what matters, and coordinate vetted specialist incident-response and forensic partners for the hands-on work.
While you wait
Do not delete anything and do not pay anyone. Note what you saw and when, leave affected accounts and devices as they are where it is safe to, and write down the timeline.
Common situations
- ✓Ransomware
- ✓Suspicious login
- ✓Business email compromise
- ✓Wire fraud
- ✓Data breach concern
- ✓Lost or stolen device
- ✓Malware infection
Preserve evidence, then escalate in the right order.
If money, data, or accounts may be at risk, make the insurer call first when you are covered. If you are not covered or unsure, contact us during business hours and we will help you triage and coordinate the right specialist support.