You are in the right place.
Take a breath. Call now, or send the form and we call you.
While you wait, three things.
- Do not power off affected machines. Shutting down destroys memory evidence and can make ransomware worse. Leave them on.
- Isolate, do not wipe. Disconnect affected systems from the network. Pull the cable or disable Wi-Fi. Do not reinstall, delete, or “clean” anything yet.
- Preserve your logs. Firewall, VPN, email, and domain controller logs age out fast. Export them now if you can do so safely.