Learn the first actions to take when an account, device, payment or credential may be compromised.
When you suspect a compromise, your first goal is to prevent further damage. Stop unsafe activity, secure affected accounts or payment channels, preserve useful evidence and contact the affected service through an official channel. Do not follow recovery instructions supplied by the suspected attacker.
Read more in the Knowledge Center →Practise the first decisions after suspected account, device, payment or credential compromise.
Practice the mapped scenarios →Identify what should be stopped, protected, preserved and reported before attempting recovery.
Test the security practice associated with this module and see where your current habits need attention.
Assess this area →Create a simple first-response sequence for the incidents most relevant to you.
Open Security Hub →After improving the habit, reassess it. The goal is not one perfect session; it is a safer pattern that holds up over time.
Reassess your security →Knowledge Center lessons explain the subject in depth. This module connects that knowledge to practice, verification and measurable improvement.
Next module: Preserve Evidence and Report →Back to Learning Center