First things first: don’t panic. But don’t ignore it either. If something feels off — emails you didn’t send, password reset notifications you didn’t request, colleagues getting strange messages from your account — act quickly.
Step 1: Change your password immediately
Use a strong, unique password. Not your dog’s name with a 1 at the end. Not your county either.
Step 2: Enable MFA if it’s not already on
This locks the door even if someone has the key.
Step 3: Check your sent items and email rules
Hackers often set up forwarding rules that silently send copies of every email to themselves. In Microsoft 365, go to Settings, then Mail, then Rules — delete anything you don’t recognise.
Step 4: Check recent sign-in activity
Both Microsoft and Google show you where and when your account was accessed. Look for locations or devices you don’t recognise.
Step 5: Tell your team and clients if needed
If your account was compromised, the hacker may have sent emails to your contacts. A quick “heads up, ignore any odd emails from me” message can stop the problem spreading.
Step 6: Contact your IT person
That’s where I come in. I can check sign-in logs, revoke active sessions, review your security settings, and make sure the attacker is fully locked out.
Under GDPR, if personal data was accessed you may need to notify the Data Protection Commission within 72 hours. I can help you assess whether that’s necessary and handle the process if it is.
The most important thing is speed. The faster you act, the less damage gets done. Don’t wait until Monday morning, don’t “keep an eye on it” — act now. And if you’re not sure, WhatsApp me. I’d rather check and find nothing than have you sitting on a breach all weekend.
If you haven’t set up MFA yet, here’s how to do it in 5 minutes. And if you’re not sure what to look for, learn how to spot phishing emails before they catch you out. I cover businesses across Tuam, Claremorris, Claregalway, and Athenry.