Help in an emergencyAcute incident
Acute incident: When it is urgent, the first step counts
Suspicious access, extortion, locked data or a suspected data leak: Get in touch immediately. Together with you we clarify the situation and the next steps.
- Report an incident
- Response within 24 hours
- Confidential
Now
How to reach us
Choose ‘Acute incident’ in the enquiry form. The call back is then already ticked. Enter your call back number and briefly describe what has happened.
With a call back number, we will get back to you within 24 hours. We do not operate an emergency phone line.
Availability
- Form topic ‘Acute incident’, with call back number
- at any time
- Email subject ‘Urgent: Security incident’
- at any time
- Response if a call back number is given
- within 24 hours
What helps now
Four things you can do straight away
First steps that limit the damage and preserve traces.
- 01
Report
Inform the responsible person in your organisation, and us.
- 02
Delete nothing
Leave affected devices, accounts and messages unchanged, so that traces are preserved.
- 03
Disconnect
Disconnect affected devices from the network if this is possible without risk to operations.
- 04
Take notes
Write down what you noticed and when. Do not pay anything and do not respond to demands.
How it runs
First contact, assessment, containment, documentation
- 01
First contact
You describe what has happened. We clarify who and what is affected and what has already been done.
- 02
Initial assessment
We assess the type and extent of the incident and tell you what to do next and what it is likely to cost.
- 03
Containment
Together with you and your IT, affected systems are isolated so that the damage does not spread.
- 04
Documentation
You receive a summary of the course of events and the measures taken, as a basis for insurers, authorities and further follow-up.
We provide support remotely and, by arrangement, on site in Switzerland.
Who it is for
For companies, families and individuals in Switzerland
Typical cases, as examples: Someone clicked on a fake link and entered login details. Files can no longer be opened and a demand appears. An account has been taken over. Confidential data turns up on the internet.
What we do
What you can expect And what you cannot
We support you with
- the initial assessment and the next steps
- containment, together with your IT
- coordination with other specialist bodies and your insurer
- documenting the course of events and the measures taken
- checking whether you are obliged to report the incident
We do not promise
- that encrypted or deleted data can be recovered
- legal advice, for which we work with your lawyer on request
- availability around the clock
What we promise, we keep.
Terms
What an engagement costs
The initial assessment costs a flat rate of CHF 390 and covers up to 90 minutes. Before we do any work beyond that, we discuss the approach and the expected costs with you.
Time is billed in 15-minute increments. All prices exclude VAT.
Prices
- Initial assessment up to 90 minutes, flat rate
- CHF 390
- Engagement per hour
- CHF 260
- With protection partnership preferential rate per hour
- CHF 220
Frequent questions
What those affected ask first
Do I have to report an incident?
Reporting obligations apply to certain organisations, such as operators of critical infrastructure. We support you in checking whether you are obliged to report.
Should I pay a ransom demand?
Do not decide this under time pressure. First discuss the situation with us, with your insurer and with the police.
Should I involve the police?
In cases of extortion, fraud or data theft, filing a criminal complaint usually makes sense. We help you put together the necessary information.
What does an engagement cost?
The initial assessment costs a flat rate of CHF 390 for up to 90 minutes. After that we charge CHF 260 per hour, or CHF 220 with an Active protection partnership, in each case excluding VAT.
How quickly will you get back to me?
If your report includes a call back number, we will get back to you within 24 hours. We accept reports at any time via the form and by email. There is no emergency phone line.
Acute incident
Better too early than too late
Briefly describe what has happened and give us your call back number. We will get back to you within 24 hours. Your enquiry is treated confidentially.