Quick response is crucial after a breach.
Immediate Actions
1. Disconnect from internet
2. Do not turn off computer
3. Document everything
4. Change passwords from another device
5. Alert relevant partiesRecovery
- Reset all passwords
- Enable 2FA everywhere
- Update all software
- Restore from backup