What to Do If You Think Your Computer Has Been Hacked

If you suspect your computer has been hacked or accessed without your permission, acting quickly and systematically is important. Here's what to do.

Step 1: Disconnect immediately

Disconnect from the internet. Unplug the ethernet cable or turn off Wi-Fi. This stops any ongoing data exfiltration and disconnects any remote access the attacker may have.

Step 2: Change passwords from another device

Using a different, uncompromised device (your phone), immediately change passwords for: your email (highest priority), your online banking, and any other important accounts. Enable 2FA on everything if not already set up.

Step 3: Contact your bank

If any financial information was accessible from the compromised computer — online banking, PayPal, Amazon — contact your bank using the number on the back of your card. They can monitor for suspicious transactions and freeze accounts if necessary.

Step 4: Assess the compromise

How did it happen? Review recent emails for phishing that you may have clicked. Check for installed remote access software. Review account activity. Understanding how it happened helps prevent recurrence.

Step 5: Professional clean

Before reconnecting to the internet, have the computer professionally checked and cleaned. Any malware installed by the attacker needs to be found and removed before you use it again.