Files and data
Unexpected file encryption, ransom notes or loss of access to shared folders.
Security incident assistance
Facing a cyberattack?Start with a call.
If you are facing ransomware, suspicious access or signs of a breach, call iTNet and describe the situation so we can discuss assessment and the next steps.
Call iTNet 02191010580What to have ready when you call
Have your organization’s name, contact details, the time you noticed the issue and the affected services ready. If you are a customer, include any related ticket number.
Security incident assistance01 02 03 04
Signs that need investigation
These signs alone do not prove an attack. Technical assessment is needed to establish the cause.
Accounts and access
Unknown sign-ins, unexpected access changes or authentication prompts you did not initiate.
Email and communications
Suspicious messages impersonating executives, altered payment details or signs of email account misuse.
Business services
Widespread outages or unexpected changes without a clear explanation.
While you contact your technical team01 02 03
Preserve information. Coordinate changes.
Record what you have observed.
Note when you noticed the issue, any error messages and the affected systems. Preserve the information available.
Avoid rushed changes.
Coordinate with your IT lead or response team before wiping, reinstalling or making widespread changes so useful evidence is not lost.
Use a trusted communication channel.
If you suspect your email or device is compromised, contact us from a trusted device. Do not send passwords or access keys in messages or tickets.
The response process01 02 03
From understanding the incident to returning to work.
Assess the scope
Understand the signs, affected services and impact on business operations.
Contain and remediate
Coordinate actions appropriate to the situation to limit the incident and address the intrusion path.
Recover and review
Plan service recovery, review the outcome and identify improvements to reduce recurrence.
FAQ
Answers for your first steps
01Should I call if I am not sure it is an attack?
Yes. Describe the signs you have observed. Assessment is needed to distinguish a security incident from a technical fault.
02What if we are not an existing iTNet customer?
Call and describe the situation. Availability, assessment scope and service terms will be discussed after we understand your needs.
03Is a resolution time guaranteed?
The time and actions required depend on the incident, its scope, available access and the condition of your services. We will discuss next steps and service terms after an initial assessment.
04Should I open a ticket or call?
For an active incident or an outage stopping your business, prioritize a call. Customers can use iTNet360 for additional details and follow-up.
05What information should I provide?
Your organization’s name, a trusted contact method, when the issue began, affected services and actions already taken. Passwords or confidential data are not needed for the initial report.
Contact and follow-up
Clearly describe the incident when you call.
For an active incident, prioritize a phone call. Customers can use iTNet360 for additional details and follow-up.