Disconnect affected devices
Unplug the network cable or turn off Wi-Fi on any device that looks compromised — this can stop ransomware or an attacker spreading further.
My business has been hacked.
Take a breath — let's contain it and get you back on track.
If your business in the Tweed, Kingscliff or Northern Rivers has been compromised, quick, calm action makes all the difference. Here's exactly what to do right now — and how I can help you recover.
First things first — don't panic, and don't delete anything
Deleting evidence can make recovery harder. Work through the calm, practical steps below, then get in touch so we can contain the incident properly.
Do these first — right now
Five quick steps that limit the damage while you arrange expert help.
Change key passwords
From a different, known-clean device, change passwords on your email, banking and Microsoft 365 / Google Workspace accounts.
Turn on 2FA
Enable multi-factor authentication on email and critical accounts immediately — it locks an attacker out even if they still have a password.
Warn your team & contacts
Let staff know not to action any unusual emails or payment requests. Attackers often target your clients next.
Don't pay or delete anything
Don't pay a ransom, and don't wipe devices or delete emails — preserve everything so we can investigate and recover safely.
// Business incident — get help
Send a message and leave your number
Tell me briefly what's happening and include your phone number — I'll call you back promptly during business hours to talk through containment and recovery. No jargon, no judgement.
Business incidents I help with
This is a service for businesses. If it's happened to your business, it's likely one of these:
Compromised email accounts
Microsoft 365 or Google Workspace account takeover, suspicious logins, and mailbox rules quietly forwarding your mail.
Business email compromise & invoice fraud
Fake payment-detail changes and fraudulent invoices sent from (or to) your business. Fast action can save serious money.
Ransomware & locked files
Files encrypted or held to ransom. I help you contain it, assess backups, and recover without making it worse.
Phishing & account takeover
Someone clicked a dodgy link and now something's wrong. I'll find what was accessed and lock it back down.
Is this a personal social media account, not a business?
My core service is helping businesses. If you're an individual and your personal social media profile (Facebook, Instagram and the like) has been compromised, I understand how stressful that is — email [email protected] with the details and I'll do my best to help or point you in the right direction.
Once you're safe — let's make sure it doesn't happen again
Recovering is step one. The real win is closing the gap that let it happen.
Take the free 2-minute Risk Check
Align your business with the Essential Eight
Australia's baseline cyber framework from the Australian Signals Directorate. I help you align with its recommendations and close the gaps that let attackers in — no certification required.
Explore the Essential Eight →