Skip to main content

Cyber Incident Support

Cyber Incident
Support

Concerned about a compromised account, ransomware or a suspected data breach? Talk to us about what has happened and the support you need.

Active incident?

Call us first

Call 1800 889 713

We will confirm our availability, the scope of assistance and the next steps.

Discuss a Cyber Incident

Sending an enquiry does not start an incident response engagement.

Existing managed clients: use the escalation contact and response arrangements in your service agreement.

Practical first steps

  1. Notify your response team

    Follow your incident response plan and contact your IT or security provider. Use a trusted phone or device if you suspect your usual account or system is compromised.

  2. Record what you have noticed

    Note when the issue began, the affected accounts or systems, the business impact and any actions already taken.

  3. Protect the evidence

    Keep relevant messages, alerts and logs. Coordinate containment with your response team and seek advice before deleting material, wiping devices or restoring systems.

Explore ASD incident response guidance

What to tell us

A brief, non-sensitive overview will help us understand your situation:

  • What you have noticed and when it started
  • The accounts, systems or services affected
  • Any disruption to your operations
  • Who is already assisting and what has been done
  • A safe phone number and your relevant timeframe

Please keep passwords, identity documents and detailed incident evidence out of the general enquiry form and ordinary email. We will agree an appropriate way to share sensitive material.

Discuss a Cyber Incident

How we can help

Support for organisations, internal IT teams, legal advisers and insurers dealing with a suspected or confirmed cyber incident.

01

Assess & contain

Discuss suspicious logins, compromised email, malware, ransomware or a suspected data breach. We help assess the situation and agree containment priorities with your IT team.

02

Investigate & preserve

Establish what may have happened through breach investigation, digital forensics and evidence preservation, with the scope and handling arrangements agreed at the outset.

03

Recover & strengthen

Plan remediation and recovery, document findings and identify improvements to reduce the risk of recurrence. Where needed, we can work alongside your existing providers and advisers.