Cyberattack

Act Immediately: Time is critical; every minute counts.

• Identify the Type of Attack:
  • Device-Based Attack (e.g., malware, ransomware, suspicious activity on your computer):
    • Disconnect from the internet immediately to prevent further data exfiltration.
    • Avoid logging into sensitive accounts from the compromised device until it’s cleaned.
• Account-Based Attack (ex. banking, email, or shopping accounts):
• Check the nature of the compromise:
  • Password breach: Look for unusual login notifications or “password reset” emails. Change your password immediately using a secure device.
  • Card or Bank Account number compromise: Look for unauthorized transactions. Contact your bank or credit card issuer immediately to block or freeze the account.
  • Do not disconnect your device unless you suspect it is also infected—staying connected helps you act faster for account recovery.

Once you’ve identified the attack type, move fast to secure all critical accounts starting with those most likely to be exploited.

• Change passwords starting with email, then banking, then other essential services.
• Use a trusted device for these changes—if you suspect your device or network has also been compromised, change passwords from a secure device on a different network.
• Enable two-factor authentication (2FA) for extra security.

• Call your bank and credit card providers immediately.
• Freeze cards or block accounts as recommended.
• Request fraud alerts or credit freezes with credit bureaus.
• Check recent transactions and set up notifications for new charges.

• Ask About Recovery Assistance – many banks and credit card companies offer zero-liability protection and identity theft recovery support. Document all conversations (names, times, case numbers) for your records.

File official reports with:

• FTC (U.S.): identitytheft.gov to file an official identity theft report and get a personalized recovery plan.
• IC3 (FBI Internet Crime Complaint Center): ic3.gov to report phishing, ransomware, and financial fraud
• Local law enforcement if identity theft or fraud is involved. Many banks require a case number for asset recovery.

Document Everything! Keep a detailed log including:

• Dates and times of suspicious activity.
• Screenshots or photos of fraudulent transactions or messages.
• Case numbers from law enforcement and financial institutions.
• Contact names and reference numbers from every call or email.
• Store screenshots of emails, texts, or pop-up messages linked to the attack.

• Back up all logs and screenshots in a secure location (ex. encrypted cloud or offline storage).

• Use a credit monitoring service or pull free credit reports (U.S.: annualcreditreport.com).
• Enable account alerts for any new logins or credit applications.
• Regularly check bank, credit card, and investment accounts for activity.

• Unexpected loan offers or collection calls.
• Mail or email addressed to you for accounts you never opened.
• Denied credit applications you didn’t initiate.
• Watch for unfamiliar medical bills or insurance claims.
• Keep an eye out for IRS notifications for tax filings you didn’t submit.