Incident Response & Recovery
What to Do If You Were Hacked: Contain, Recover, and Learn
Prioritize the accounts and devices that can reset, impersonate, or move money, then recover methodically and document what happened.
Knowledge hub
An incident becomes easier to manage when the response follows the systems at risk: personal safety, device access, email, phone number, recovery methods, money, identity records, and evidence. These guides help readers contain immediate harm, verify what happened, protect recovery channels, contact the right provider or authority, and document the steps still outstanding.
Are you containing an active compromise, protecting a lost device, responding to exposed data, or rebuilding account control?
7 substantial guidesGuides in this hub
Incident Response & Recovery
Prioritize the accounts and devices that can reset, impersonate, or move money, then recover methodically and document what happened.
Incident Response & Recovery
Separate a suspicious message from verified misuse, then act through official channels in order of financial and identity impact.
Incident Response & Recovery
Prioritize high-harm exposure, remove information at its source where possible, and understand the limits of search suppression and broker opt-outs.
Incident Response & Recovery
Use a repeatable verification process when a message creates urgency, fear, secrecy, scarcity, affection, authority, or an unexpected payment path.
Incident Response & Recovery
Match protective action to the data exposed, the account involved, the attacker’s likely next step, and whether misuse has already appeared.
Incident Response & Recovery
A calm, platform-aware response plan for protecting your device, phone number, accounts, and identity without destroying useful recovery options too early.
Incident Response & Recovery
A plain-language U.S. guide to choosing, placing, and managing credit freezes and fraud alerts without confusing them with credit locks or card freezes.
A useful way through