Incident Response

Under attack? Call us now: (772) 794-1194.

Ransomware, a hacked email account, a suspicious login: we help contain it, find out what happened and get you working again. Clients come first, and we help businesses that aren't clients too.

First steps

What to do right now

  1. Disconnect

    Unplug the network cable or turn off Wi-Fi on affected computers. Don't power them off.

  2. Don't pay or reply

    Don't respond to anyone demanding money.

  3. Call us

    (772) 794-1194.

Our response

What we do

  1. Contain

    Stop the threat from spreading.

  2. Investigate

    Find out what happened, how they got in and what was touched.

  3. Recover

    Restore your systems and data from clean backups.

  4. Harden

    Fix what was weak, so it doesn't happen again.

Questions

Questions we hear a lot.

Do you help if we're not a client?

Yes. Call us; clients come first, and we'll tell you straight away what we can do.

Should we pay the ransom?

Talk to us and your legal advisor first. Paying doesn't guarantee your data back.

Better yet, stop it before it starts.

MainSail Cyber clients have automatic isolation working for them 24/7, so many threats are stopped before they become incidents.