Suspect a breach, ransomware or email spoofing?

1. 1

   Isolate, don't wipe

   Disconnect affected machines from the network, but do not switch them off or wipe them.

2. 2

   Preserve evidence

   Keep logs and suspicious emails. Don't delete anything, even if it looks harmful.

3. 3

   Reset from a clean device

   Reset passwords from a device you trust, and enforce MFA on email and admin accounts.

4. 4

   If money was sent

   Call your bank immediately, then report on the national cybercrime helpline 1930 or cybercrime.gov.in.

5. 5

   Report to CERT-In

   Specified cyber incidents must be reported to CERT-In within 6 hours at incident@cert-in.org.in.

6. 6

   Tell us what you see

   Use the form below or email info@cloudcyber.co.in. Include what happened, when, and which systems.

We don't offer guaranteed response times or 24x7 cover. For money sent to a fraudster, your bank and 1930 come first.