You are in the right place.
If something feels wrong, slow the room down. Preserve evidence, contain the obvious damage and open a line quickly.
You are in the right place.
If you think your business has been hacked, hit with ransomware, or compromised in any way, we can help. Take a breath. You have got us now.
We respond to breach enquiries within 1 hour during business hours.
While you wait, here is what to do right now
Unless you are actively watching data being destroyed, leave computers on. Turning them off can destroy evidence we need to help you.
Unplug the network cable or turn off Wi-Fi on affected machines. This stops the attacker spreading further without destroying evidence.
If you are seeing a ransom demand, do not pay it yet. Payment does not guarantee recovery. We need to understand the situation first.
When did you first notice something wrong? What did you see? Which systems are affected? On paper or your phone is fine. This helps us move faster.
Call, WhatsApp, live chat, or use the form below. Include a phone number so we can call you directly.
Get help now
Fill in as much as you can. We will call you back.
What happens after you contact us
We call you back, assess the situation, and give you immediate guidance on containment.
We begin remote investigation. We will tell you what we can see, what the attacker has done, and what needs to happen next.
You have a clear picture: what happened, what data is affected, who needs to be notified, and a recovery plan. We handle the technical response while you focus on your business and your people.
You can also call the NCSC directly on 0300 020 0973 or report to Action Fraud on 0300 123 2040.