What to Do If You've Been Hacked

If you suspect your device or an online account has been compromised, it's important to act quickly but calmly. Follow these steps to minimize the damage.

1. Disconnect from the Internet

   Immediately disconnect the compromised device from the internet (unplug the ethernet cable or turn off Wi-Fi). This prevents the attacker from causing further damage or stealing more data.

2. Scan for Malware

   Using a different, trusted computer, download a reputable antivirus program onto a clean USB drive. Install and run a full system scan on the affected device to find and remove any malicious software.

3. Change Your Passwords

   From a safe device, change the passwords for your most critical accounts first: email, banking, and social media. Then, continue changing passwords for your other online accounts. Use a password manager to create strong, unique passwords for each one.

4. Notify Banks and Other Institutions

   Contact your bank and credit card companies to alert them of a potential breach. They can monitor for fraudulent activity and may recommend issuing new cards.

5. Enable Multi-Factor Authentication (MFA)

   If you haven't already, enable MFA on all accounts that offer it. This provides a critical layer of security that can block an attacker even if they have your password.

6. Report the Incident

   Report the cybercrime to the relevant authorities. In the U.S., you can report it to the FBI's Internet Crime Complaint Center (IC3) or the Federal Trade Commission (FTC) at ReportFraud.ftc.gov.