My Computer Was Hacked — What to Do Right Now
Don't panic. Follow these steps immediately to limit the damage, secure your accounts, and get your system back under your control.
Get Emergency IT Help NowStep 1: Disconnect and Contain the Threat
The very first thing you need to do is isolate your computer from the network. This prevents the attacker from continuing to access your system, stealing more data, or spreading to other devices on your network.
Do This Immediately
- Disconnect from Wi-Fi: turn off Wi-Fi on the device or unplug the ethernet cable physically
- Do NOT power off the computer: forensic evidence in memory could be lost; simply disconnect the network
- Disconnect external drives: remove USB drives, external hard drives, and any NAS connections
- Note the time: write down the exact time you discovered the breach for your records
Common Mistakes to Avoid
- Do not run random antivirus scans yet: some malware detects scans and wipes data in response
- Do not log into accounts from the compromised machine: the attacker may be capturing keystrokes
- Do not pay a ransom: there is no guarantee your data will be returned, and it funds criminal activity
Step 2: Identify What Type of Attack Occurred
Understanding the type of attack helps determine your next steps. Different attacks require different responses. Here are the most common types and their telltale signs.
Ransomware
Your files are encrypted and a message demands payment for the decryption key.
- Files renamed with strange extensions (.locked, .encrypted)
- Desktop wallpaper changed to a ransom note
- Text files with payment instructions appearing in folders
Remote Access Trojan (RAT)
An attacker has remote control of your computer and can see everything you do.
- Mouse cursor moves on its own
- Programs opening or closing without your input
- Webcam light turning on unexpectedly
Account Compromise
Your email, banking, or social media accounts have been taken over by an attacker.
- Password reset emails you did not request
- Login alerts from unfamiliar locations or devices
- Emails sent from your account that you did not write
Keylogger / Spyware
Malicious software is silently recording your keystrokes and activity.
- System running noticeably slower than usual
- Unknown processes running in Task Manager
- Browser redirecting to unfamiliar websites
Step 3: Secure Your Accounts (From a Clean Device)
Using a different, trusted device such as your phone or another computer, begin securing your most critical accounts. Prioritize in this order: email, banking, then everything else.
Account Recovery Checklist
- Change your email password first: your email is the key to resetting all other accounts
- Enable two-factor authentication: use an authenticator app, not SMS, when possible
- Review active sessions: sign out of all other sessions in your email and banking accounts
- Change banking passwords: contact your bank directly if you see unauthorized transactions
- Check email forwarding rules: attackers often set rules to forward copies of your email to themselves
- Use unique passwords: never reuse a password that was on the compromised machine
Step 4: When to Call a Professional
While some minor infections can be handled on your own, most real hacking incidents require professional help. Attempting to clean a compromised system yourself can make things worse, destroy forensic evidence, or leave backdoors that the attacker can use to get back in later.
Call a Professional If:
- You suspect ransomware of any kind
- Financial accounts have been accessed
- Business data or client information may be exposed
- Multiple devices or accounts are compromised
- You are unsure what type of attack occurred
What a Professional Will Do
- Forensic analysis: determine exactly what happened and what was accessed
- Malware removal: safely remove all malicious software without data loss
- System hardening: close the vulnerabilities that allowed the attack
- Data recovery: recover files that may have been encrypted or deleted
- Prevention setup: install proper security to prevent repeat attacks
Step 5: Prevent It From Happening Again
Once your system is clean and your accounts are secured, take these steps to dramatically reduce your risk of being hacked again.
Software & Updates
- Enable automatic OS updates
- Keep all software current
- Use reputable antivirus software
- Remove software you no longer use
Passwords & Access
- Use a password manager
- Enable 2FA on all accounts
- Use unique passwords everywhere
- Review account access regularly
Network & Habits
- Secure your home Wi-Fi with WPA3
- Avoid public Wi-Fi without a VPN
- Never click suspicious links or attachments
- Back up your data regularly
Need Emergency IT Help Right Now?
Our on-demand IT support team can help you identify the attack, secure your accounts, clean your system, and get you back up and running. Don't wait. Every minute counts when your computer has been compromised.
Related reading
All postsRelated reading
All postsGet Security Insights Delivered
One email per month with our best articles. No spam.