Free hack help · Runs in your browser
We have been hacked.
What now?
A taken-over account, a ransom note, a fake invoice: in the first hours you make the mistakes that cost the most later. Fill in what happened and get an action plan straight away, the deadlines by which you must inform someone, and a log to keep track of what you do.
Free · No account · Nothing is sent anywhere
The clock has been running since Friday 14:10
Do this now, in this order
Fill in what happened
It takes a minute. What you enter does not leave this page. If it is acutely serious, involve your IT partner first.
Three things you
need right now.
Frequently asked questions
Within how many hours must I report a data breach?
For a breach involving personal data you report to the Dutch Data Protection Authority within 72 hours of becoming aware, unless it is unlikely to result in a risk to the people concerned. The deadline also runs at weekends.
Should I pay the ransom for ransomware?
The police advise against paying: there is no guarantee you get your data back. Always consult the police and a lawyer first, and tell the police if you did pay.
What do I do if an account has been taken over?
Revoke the sessions and change the password from a clean device, check MFA methods, mailbox rules and apps with access, and look at the sign-in logs. For Microsoft 365 the steps and links are in the hack help.
Is any of my input stored?
No. Everything happens in your own browser. Nothing is sent or kept, and you make the PDF yourself via the print window.
What the hack help does not do, and why that is more honest
It is not incident response. The tool does not replace an IT specialist or a forensic company. If it is serious (ransomware, a lot of data, money gone), get help straight away.
It is not legal advice. Whether you must report depends on the facts. The tool shows you the deadlines and what to assess, but does not take that decision for you. If in doubt: choose “I do not know”, then you proceed carefully.
The deadlines are only as good as your input. We calculate from the time you enter. The legal clock runs from the moment you knew.
It never says it is “resolved” or “safe”. This is an action plan, not a check of your environment.
Everything stays
with you.
The hack help runs entirely in your own browser. Your answers are not sent, not stored and not seen by us. You also make the PDF yourself via your browser's print window; nothing is uploaded.
What you may come across is measurement, and only if you accepted the cookie notice: a counter of how often the tool was used, never what you answered.
Rather prevent than follow action plans?
Most incidents start with an account without MFA, an impersonated mail or a forgotten permissions structure. The MK Cloud & IT M365 Security Dashboard shows that daily, for your Microsoft 365 environment.
See the M365 Security Dashboard →More tools like this
The hack help is one of the free apps from MK Cloud & IT. Also see the NIS2 check (do we fall under it?). All apps (in Dutch for now).
Sources
The GDPR (Articles 33 and 34, reporting data breaches to the Dutch Data Protection Authority and to data subjects), the NIS2 Directive (Article 23) and the Dutch Cybersecurity Act (reporting via mijn.ncsc.nl), and the advice of the NCSC and the police (politie.nl, nomoreransom.org).
For organisations
MK Cloud & IT helps organisations of 50 to 500 users set up their Microsoft 365 so an incident like this is less likely, and easier to recognise if it does happen. See the M365 Security Dashboard or get in touch.
Is something wrong in the action plan, or are you missing something? Let us know.