A security breach can take many forms: a hacked email account, ransomware encrypting your files, a stolen laptop, or unauthorized access to your business systems. Speed is critical. The longer a breach goes unaddressed, the more damage occurs and the harder recovery becomes.

Immediate Steps (First 15 Minutes)

Do not turn off affected computers unless instructed by our team. Forensic evidence lives in memory and may be needed to understand the attack.
Disconnect compromised devices from the network. Unplug the ethernet cable or disable Wi-Fi to contain the spread without destroying evidence.
Call BRANDED IAM immediately: (925) 365-9811. Do not wait to submit a ticket — call first. Our on-call team is available 24/7 for security emergencies.
Change passwords for any accounts you suspect were accessed, using a device that is not compromised. Prioritize email, banking, and any accounts with customer data.
Do not pay any ransom without first consulting our team and a legal advisor.

Signs That Indicate a Possible Breach

Emails in your Sent folder that you didn't write.
Colleagues receiving emails from you that you didn't send.
Files renamed with a strange extension (e.g., .locked, .encrypted).
Antivirus or security software unexpectedly disabled.
Unfamiliar programs or login entries in your Microsoft 365 admin panel.
Customers receiving suspicious communications that appear to come from your business.

After the Immediate Response

Once the situation is contained, our team will conduct a forensic investigation to determine how the breach occurred, what was accessed, and whether any data was exfiltrated. Depending on the nature of the breach and your jurisdiction, you may have legal notification obligations — we can help you understand these in coordination with your legal advisor.