14 September 2026

5 minute read

The emergency guide for those who have been hacked

Security
Phishing / fraud
For small businesses
Hacking

1. Identify the extent of the damage

The first thing you must do if you suspect you have been hacked is to react quickly. The faster you take action, the less damage the hacker can do. At the same time, it is important not to panic. You need a clear head to make the right decisions in this situation.

Start by identifying the extent of the damage. Has the hacker only taken control of one account, or are several of your accounts compromised? Is there data on your device that is infected or lost? Understanding what has been attacked will help you prioritize what needs to be fixed first.

2. Disconnect the device from the internet

If you discover that your computer or mobile phone has been hacked, you should immediately disconnect the device from the internet. This can prevent the hacker from continuing to download data or perform further malicious actions.

If you are unsure how your device was compromised, disconnecting from the network can also help stop communication between your computer and any malicious software that may have been installed. Disconnecting can be as simple as disabling Wi-Fi or removing a network cable.

3. Change passwords immediately

When an account is hacked, the first step is to change the password as soon as possible. Use a secure device that is not compromised, such as another computer or mobile phone, to do this. This prevents the hacker from maintaining access to your account.

When changing your password, ensure that the new password is strong and unique. Combine uppercase and lowercase letters, numbers, and special characters to make it harder to guess. Avoid simple passwords like "123456" or "password," which can be cracked in seconds. For the future, we recommend considering the use of a password manager to keep track of strong, unique passwords for every account.

4. Enable two-factor authentication (2FA) or reset your existing one

Two-factor authentication (2FA) is one of the most effective ways to protect your accounts, even after you have been hacked. This security method requires that you not only use your password to log in, but also an additional code sent to your phone or generated by an authentication app. This makes it far more difficult for hackers to gain access to your account, even if they have your password.

If the hacker has gained access to an account where 2FA was not enabled, you can enable it when you change your password. Remember to do this for all your important accounts, such as email, social media, online banking, and any work-related accounts.

Do you already have two-factor authentication enabled, but still experienced an unwanted intrusion? In that case, we recommend resetting or setting up two-factor authentication again.

5. Check for malicious software

If your device has been hacked, or you suspect it has been infected with a virus or other malware, we always recommend resetting or formatting the device if it is compromised. Unfortunately, it is impossible to guarantee that it will be "cleaned" through a thorough system scan. Therefore, we prefer to do it properly the first time!

6. Notify the necessary parties

If the hacking has affected your financial accounts, such as bank accounts or credit cards, it is important to notify your bank immediately. They can help you block cards or temporarily freeze accounts to prevent further damage.

In addition, you should contact any other affected services. If your email account was hacked, you should contact your email provider or notify the IT department at work or your external IT provider. If your social media accounts are compromised, contact the platform's customer service to get help securing your account again.

7. Monitor your accounts for unusual activity

Once you have regained control of your accounts, you should monitor them closely in the following weeks for signs of suspicious activity. Hackers may attempt to regain access, or they may have gathered enough information to launch new attacks on other accounts.

Keep an eye on bank statements, credit card transactions, and your email account for signs of unauthorized activity. If you notice anything suspicious, notify the relevant institutions immediately.

8. Inform friends and family

Hackers may try to use the information they obtain from you to attack others, such as your friends, family, or colleagues. If you have been hacked, especially on social media or email, it is important to alert your contacts about the situation.

Warn them against suspicious messages or requests that may come from your account, and encourage them to be extra cautious about clicking links or downloading attachments from messages that appear to come from you.

9. Secure your future with these security measures

Once you have dealt with the consequences of the hack, it is important to implement regular security measures to prevent it from happening again.

We recommend:

- Updating your passwords to be complex, using a mix of uppercase and lowercase letters, special characters, and numbers. Preferably 14 characters or more.

- Never reuse your password across services. Not even when you are "just" changing a password quickly. It is not worth it.

- Making regular backups of important files and documents.

- Using a secure VPN when connecting to public or unsecured networks.

- Keeping software and devices updated to protect against new security threats.

Being hacked can feel incredibly invasive and personal, but it is possible to regain control of the situation by following these steps. Quick reaction and effective measures are crucial to minimize damage and ensure your data remains safe. Remember, the best defense is good digital hygiene and preventive measures!

Newsletter

Stay updated

Get news, tips, and updates delivered straight to your inbox. No spam, just content that matters to you.