What Do I Do Now?

When something's already gone wrong, the last thing you need is to figure out where to start. Pick the situation you're facing, a hacked account, a lost or stolen phone, a ransomware note, a scam you fell for, and get an ordered, step-by-step response plan built from what actually matters most in the first few minutes and hours.

When something's already gone wrong, the last thing you need is to spend time figuring out where to start. Pick the situation you're facing below, a hacked account, a lost or stolen phone, a ransomware note, a scam you fell for, and get an ordered, step-by-step response plan built from what actually matters most in the first few minutes and hours.

Frequently Asked Questions

What should I do first after a security incident?

It depends on the specific situation, contain first (disconnect, change the password, freeze the card), then assess what was actually exposed, then notify anyone who needs to know. Pick your situation above for the exact order that applies to it.

Should I panic if my account was hacked?

No, most account takeovers are recoverable if you act in the first hour: change the password from a different device, revoke active sessions, and re-enable two-factor authentication.

Do I need to report this to anyone?

For financial fraud or identity theft, yes, contact your bank and consider a report to your local authority. For a compromised work account, notify your IT or security team immediately regardless of how minor it seems.