Emergency Response

My Computer Was Hacked — What to Do Right Now

Don't panic. Follow these steps immediately to limit the damage, secure your accounts, and get your system back under your control.

Get Emergency IT Help Now

2,200+cyberattacks happen every day

197 daysaverage time to detect a breach

43%of attacks target small businesses

$4.88Maverage cost of a data breach

Step 1: Disconnect and Contain the Threat

The very first thing you need to do is isolate your computer from the network. This prevents the attacker from continuing to access your system, stealing more data, or spreading to other devices on your network.

Do This Immediately

Disconnect from Wi-Fi — turn off Wi-Fi on the device or unplug the ethernet cable physically
Do NOT power off the computer — forensic evidence in memory could be lost; simply disconnect the network
Disconnect external drives — remove USB drives, external hard drives, and any NAS connections
Note the time — write down the exact time you discovered the breach for your records

Common Mistakes to Avoid

Do not run random antivirus scans yet — some malware detects scans and wipes data in response
Do not log into accounts from the compromised machine — the attacker may be capturing keystrokes
Do not pay a ransom — there is no guarantee your data will be returned, and it funds criminal activity

Step 2: Identify What Type of Attack Occurred

Understanding the type of attack helps determine your next steps. Different attacks require different responses. Here are the most common types and their telltale signs.

Ransomware

Your files are encrypted and a message demands payment for the decryption key.

Files renamed with strange extensions (.locked, .encrypted)
Desktop wallpaper changed to a ransom note
Text files with payment instructions appearing in folders

Remote Access Trojan (RAT)

An attacker has remote control of your computer and can see everything you do.

Mouse cursor moves on its own
Programs opening or closing without your input
Webcam light turning on unexpectedly

Account Compromise

Your email, banking, or social media accounts have been taken over by an attacker.

Password reset emails you did not request
Login alerts from unfamiliar locations or devices
Emails sent from your account that you did not write

Keylogger / Spyware

Malicious software is silently recording your keystrokes and activity.

System running noticeably slower than usual
Unknown processes running in Task Manager
Browser redirecting to unfamiliar websites

Step 3: Secure Your Accounts (From a Clean Device)

Using a different, trusted device such as your phone or another computer, begin securing your most critical accounts. Prioritize in this order: email, banking, then everything else.

Account Recovery Checklist

Change your email password first — your email is the key to resetting all other accounts
Enable two-factor authentication — use an authenticator app, not SMS, when possible
Review active sessions — sign out of all other sessions in your email and banking accounts

Change banking passwords — contact your bank directly if you see unauthorized transactions
Check email forwarding rules — attackers often set rules to forward copies of your email to themselves
Use unique passwords — never reuse a password that was on the compromised machine

Step 4: When to Call a Professional

While some minor infections can be handled on your own, most real hacking incidents require professional help. Attempting to clean a compromised system yourself can make things worse, destroy forensic evidence, or leave backdoors that the attacker can use to get back in later.

Call a Professional If:

You suspect ransomware of any kind
Financial accounts have been accessed
Business data or client information may be exposed
Multiple devices or accounts are compromised
You are unsure what type of attack occurred

What a Professional Will Do

Forensic analysis — determine exactly what happened and what was accessed
Malware removal — safely remove all malicious software without data loss
System hardening — close the vulnerabilities that allowed the attack
Data recovery — recover files that may have been encrypted or deleted
Prevention setup — install proper security to prevent repeat attacks

Step 5: Prevent It From Happening Again

Once your system is clean and your accounts are secured, take these steps to dramatically reduce your risk of being hacked again.

Software & Updates

Enable automatic OS updates
Keep all software current
Use reputable antivirus software
Remove software you no longer use

Passwords & Access

Use a password manager
Enable 2FA on all accounts
Use unique passwords everywhere
Review account access regularly

Network & Habits

Secure your home Wi-Fi with WPA3
Avoid public Wi-Fi without a VPN
Never click suspicious links or attachments
Back up your data regularly

Need Emergency IT Help Right Now?

Our on-demand IT support team can help you identify the attack, secure your accounts, clean your system, and get you back up and running. Don't wait — every minute counts when your computer has been compromised.

Get On-Demand IT Support

Get Security Insights Delivered

One email per month with our best articles. No spam.