Under attack? Reach our incident line.

Tell us what is happening. If it is critical, you get our incident line at once. No sign-up, no waiting.

This is an emergency
Our incident line is for attacks happening now. What is happening right now?

For anything else, use Talk to us.

Prefer to answer three questions?

Three questions for organisations. If you are not sure, choose "Not sure".

Are files encrypted, systems wiped or locked, or has anyone demanded a ransom?
Is someone you do not recognise inside your systems or accounts (including an executive’s or an official account), or are data or money being taken?
Are critical or customer-facing services down, or being flooded, because of an attack?

What happens when you call

  1. A responder answers
  2. Triage and first-hour guidance
  3. A named lead is assigned
  4. Remote containment starts

What to do in the first hour

What to have ready

  • Organisation
  • Affected systems
  • When it started
  • Who is on site
  • Network diagram
  • Contact tree
  • Retainer reference

If this page cannot show the number, use the number in your contract if you have a retainer with us, or email [email protected].

Afterwards: incident response and retainers