You Got Hacked! Now What?
The day you didn't wish for finally comes... your files are locked, and there's a ransom note on your computer. Here are the five things to do in the first hour.
The 5-Step Ransomware Playbook
Stop it spreading.
Unplug the network cable and turn off the Wi-Fi to minimize the damage — but leave the computer on. Switching it off wipes evidence the experts need.
Grab your phone.
Call your IT provider, your cyber insurer, and the authorities. Do it right away, some insurance policies stop covering you after 72 hours.
Leave the computer alone.
Don't restart it, reinstall, or try to fix it. Just photograph the ransom note.
Don't pay the ransom.
There's no guarantee you'll get your files back, and it funds the next attack. Let the professionals decide.
Notify if necessary.
If customer or staff data was stolen, you'll usually have to tell the people affected — and the regulator. Your IT team and insurer will walk you through it.
