Suspected data breach?

If data was encrypted, leaked or accessed without authorization, a calm and documented first response matters. This page summarizes immediate steps and contact options.

Immediate checklist

Work through these steps in order and only change affected systems when your IT or incident-response team instructs you to do so.

  1. 1

    Stay calm

    Do not delete or change systems in panic. Preserving evidence matters.

  2. 2

    Disconnect affected devices

    Remove affected devices from LAN or Wi-Fi to limit spread.

  3. 3

    Inform IT or helpdesk

    Call your IT team or security owner immediately.

  4. 4

    Do not repair alone

    Uncoordinated fixes can destroy evidence or make recovery harder.

  5. 5

    Document what happened

    Record time, screenshots, messages and visible indicators.

Classify the incident confidentially

We help structure the situation, coordinate next steps and avoid unnecessary changes to affected systems.