IMMEDIATE STEPS
Protect Evidence and Limit Further Impact.
- Do not power off affected systems.
- Disconnect affected devices from the network.
- Preserve logs, emails, and evidence.
- Do not contact or pay the attackers.
- Notify your cyber insurance carrier before engaging outside vendors, since many policies require approved responders.
Do not wipe, reimage, or restore systems before evidence is preserved.
For Less Urgent Situations
Share the essential details and we’ll follow up as soon as possible.
Response time: Form submissions are reviewed as soon as possible but do not guarantee an immediate response. For an active or rapidly evolving incident, call or text (469) 246-4888 now.