Under attack?
Our responders are ready now.
Report the incident below and a Cygent responder will contact you as a priority, day or night. We contain, investigate and help you recover.
Do now
- Isolate affected machines from the network (unplug or disable Wi-Fi)
- Keep machines powered on, memory holds evidence
- Preserve logs, emails and ransom notes
- Use a separate, clean channel to coordinate
Avoid
- Do not pay or contact the attackers before talking to us
- Do not wipe or reinstall systems yet
- Do not use possibly compromised email accounts to discuss the incident
- Do not announce publicly before the facts are clear