Mon-Fri 9am-5pm · Callback within 30 minutes
Incident Response: Immediate Support for Cyberattacks and IT Emergencies
Ransomware, compromised accounts, email fraud: Call our incident hotline. We will assess the incident over the phone, contain it, and guide you through recovery and reporting obligations. The initial consultation is free of charge.
TYPICAL INCIDENTS
We help in these situations.
For companies and organizations across all industries – even if you are not yet a customer.
Ransomware
Files encrypted, ransom note on the screen. Immediately disconnect backups from the network, do not contact the blackmailers, take a photo of the message.
Account Takeover
Unfamiliar logins, unknown forwarding rules, emails you didn't write. We lock and secure affected accounts and investigate what the attacker had access to.
CEO Fraud & Wire Transfer Fraud
Approved a payment to a scammer? Call your bank immediately and request a recall of the transfer. After that, we will determine how the attack happened.
Phishing and its consequences
Clicked a link, entered login credentials, or opened an attachment? We'll investigate what happened and secure your accounts and devices before the attacker makes any further moves.
Data Leakage & Extortion
Threat of publication or data found online. Do not reply, save the message, note the time—the reporting deadlines are already running.
Malware
Antivirus warnings, unknown processes, systems behaving unusually. Initial analysis, containment, and subsequent cleanup or rebuild.
HOW IT WORKS
From the first call to the final report.
Every incident has phases. We guide you through them together—with clear time targets, documented decisions, and a dedicated point of contact. Before any costs are incurred, we will explicitly let you know and obtain a brief written confirmation for the order.
WHAT YOU GET
Help based on the situation – not by the package.
Not every incident is a crisis. We classify it into three levels and respond appropriately—from free telephone advice to an on-site crisis management team.
WHO IT'S FOR
We understand the specific requirements of your industry.
An incident in a healthcare facility unfolds differently than in an office: patient care takes precedence, medical devices are not patched arbitrarily, and patient data triggers parallel reporting pathways to the BSI and data protection authorities. Our approach is designed specifically for this.
Hospitals
Containment designed with hospital operations in mind: emergency procedures, prioritization of vital systems, coordination with medical and nursing leadership—all while keeping parallel reporting channels in view.
Medical Health Centers & Practice Networks
Practice management software encrypted, inboxes compromised: Initial assessment by phone, remote containment, and recovery – even without an in-house IT department, across all locations.
Private Clinics
Clear escalation without a dedicated security team: Initial assessment within the first hour, containment on the same business day, and a crisis management team with executive leadership for critical situations.
Pharma & MedTech
Incidents in production, laboratory, or supply chain: Initial analysis, containment, and sound evidence preservation - legally defensible forensics via specialized partners.
Care facilities
Distributed locations, mobile devices, minimal on-site IT: We guide you through the first steps by phone and contain the incident remotely. Resident data is strictly protected—we keep deadlines in check.
Health Tech
Compromised cloud accounts, data exfiltration from platforms and apps: containment, entry-vector analysis, and support for notifications under Article 33 GDPR.
PREVENTION
Prepared before it happens.
Those who have practiced their procedures react faster and more calmly in an emergency. We also offer these services without an active incident.
IT Disaster Recovery Plan
Who decides, who do you call, how does emergency operation work? We create or review your emergency plan, including reporting and recovery processes in accordance with NIS2—concise enough that it will actually be read in an emergency.
Emergency drills
A realistic scenario, such as ransomware, played out with management and IT as a tabletop exercise. Afterwards, everyone knows what to do—and where the plan has gaps.
Prepare reporting channels
BSI registration, templates for 24- and 72-hour notifications, and clear responsibilities. This turns reporting requirements into a routine rather than an added crisis when an incident occurs.
Frequently Asked Questions About Cyberattacks
The most important answers for an emergency. Can't find your question? Call us at: +49 30 863283646.