Contain before you clean up

The first reaction is often to delete messages, reset everything or wipe a device. That can make recovery harder. Start by limiting damage and preserving evidence.

If this involves business email, invoices, Microsoft 365, bank payments or customer data, treat it as urgent.

Practical checks to start with

Use a clean device for password changes and trusted contact routes for financial checks.

  • Disconnect affected devices if needed
  • Change passwords from a clean device
  • Do not approve payment changes without verification
  • Preserve emails, logs and screenshots
  • Ask for help if accounts or data are at risk

What to do next

Write down what happened and when, secure email and Microsoft 365 accounts first, check banking and supplier payment changes and contact IT Life-Raft for urgent cyber help.

How IT Life-Raft can help

IT Life-Raft helps small businesses connect practical managed IT support, cybersecurity, Microsoft 365, AI and automation into a simpler operating model. That means fewer unknowns, clearer priorities and support that is easier to act on.

A common mistake is waiting until there is a visible problem before reviewing the process. By that point the business may already be dealing with downtime, lost time, confused staff or avoidable recovery work. Another mistake is treating technology as separate from how the business actually works. IT support, cybersecurity, backups, automation and documentation all affect customer service.