Article Summary: If your business is hit by a cyberattack, the first hour matters. Disconnect the affected devices from the network instead of powering them off, call your IT provider by phone, and leave the evidence in place. If money was wired to a scammer, call your bank right away. This post is the step-by-step plan, plus where to report an attack in the US, UK, and Australia.If a cyberattack hits your business, what you do in the first hour really matters.It’s also the easiest time to make a costly mistake, like turning off the wrong machine, deleting evidence, or replying from an email account the attacker is already reading.The steps below tell you what to do, in order, so you’re not guessing in the moment.Doing these steps doesn’t require technical knowledge.Before anything else: don’t make it worseBefore you touch anything, avoid these:Don’t turn the affected computer off, if you
