We’ve been breached. What do I do RIGHT NOW?

We've been breached. What do I do RIGHT NOW?

  • Disconnect the affected device from the network — pull the ethernet cable, turn off WiFi. Don’t power off (you may need forensic evidence).
  • Change credentials from a clean device — passwords for the affected user, plus any shared accounts.
  • Preserve evidence — don’t reformat, don’t delete logs.
  • Call us: 08 8379 4802 (business hours). For after-hours emergencies, existing managed clients have a different number — please use that.
  • Assess Privacy Act notification obligations — the Notifiable Data Breaches scheme requires notification to the OAIC + affected individuals within 30 days of assessment of “likely serious harm”.

(see above)

We’re a calm, knowledgeable first call for a breach. We help you contain, preserve evidence, assess the Privacy Act position, and engage external incident response specialists for major incidents. We’re not a forensic IR firm ourselves — for breaches at scale we work with one. But we’re the right number to call first.

If this is happening NOW, stop reading and call 08 8379 4802.

Want to talk through this in your specific business context? The first 30 minutes is free — phone or Microsoft Teams. Book a free 30-min scoping call →

All Cyber Security FAQs →

FAQ's

Some of our
Clients