Digital Security Quick Reference

Our guiding principle:

Slow Down. Verify. Then Act.

You do not need to become a security expert. This short guide gives you the most important
actions and habits. Your full Digital Security Incident Response & Recovery Guide has deeper
detail whenever you want it.

A modern security incident often touches more than just one device.

1. What “Hacked” Can Mean

The word “hacked” is convenient but imprecise. You may have experienced any combination of:

• A phishing call, text, email, or fake website

• Remote-access software installed by a scammer

• A stolen or reused password

• An email or online account takeover

• Unauthorized financial activity

• Personal information exposed in a data breach

A clean malware scan does not automatically mean every account is safe. Device security and
account security must both be considered.

2. Immediate Safety Steps

1. Stop communicating with the suspicious caller, sender, or website.

2. Do not send more money, gift cards, cryptocurrency, codes, or passwords.

3. If money is still moving, call the financial institution using the number on the back of the
card or the official app.

4. If someone may have unauthorized remote access to your computer, phone, or tablet, disconnect
it from the internet by turning off Wi-Fi and cellular data or unplugging the Ethernet cable.
Power off the device unless Bringing Your Tech to Life, law enforcement, or another authorized
incident-response professional has specifically instructed you to preserve it in its current
state. Do not use the affected device for banking, email, or password changes until it has been
evaluated.

5. Do not factory-reset or “clean” the device until it has been examined.

6. Preserve screenshots, messages, call logs, receipts, and any other evidence.

3. The Recovery Path

Recovery works best when done in a deliberate order. The path below is a practical sequence we
commonly follow.

1. Stop & Isolate — Stop communicating with the suspected scammer, prevent
further financial losses, and isolate affected devices when appropriate.

2. Document & Preserve — Save messages, screenshots, receipts, call
details, and other evidence before making unnecessary changes.

3. Investigate & Assess — Determine what happened, which devices or
accounts may be involved, and what information may have been exposed.

4. Secure Devices & Accounts — Address unauthorized access, remove threats,
secure important accounts, change exposed passwords, and review active sessions.

5. Recover & Restore — Restore normal access, address financial or
identity-related concerns, and complete remaining recovery actions.

6. Monitor & Prevent — Watch for suspicious activity, follow your Service
Report recommendations, and practice habits that reduce future risk.

Move through these stages calmly. You do not have to finish everything in one day.

4. Passwords: One Key or Many Keys?

Password reuse is one of the most common ways a single breach turns into many problems. Unique
passwords limit the damage.

Priority order for password changes (from a trusted device): Primary email → recovery email →
financial accounts → Apple/Google/Microsoft accounts → password manager → other important
accounts.

Priorities depend on what was exposed.
Secure a compromised password manager or primary email account immediately;
protect financial and recovery accounts promptly.

5. Secure These First

• Primary email account (the one used for password resets)

• Any recovery email or phone number attached to important accounts

• Banking and payment apps

• Apple, Google, or Microsoft accounts that control devices and sync

• Cellular-provider account (to protect the phone number used for codes)

• Any account that still uses a reused or exposed password

6. Habits That Make You a Harder Target

You do not need perfect security. Consistent small habits matter more than any single product.

• Slow down and verify. Never let an unexpected caller, email, or text message
pressure you into making an immediate decision.

• Use unique passwords. Never reuse passwords between accounts, especially
email, banking, and shopping accounts.

• Enable two-factor authentication. Use passkeys, authentication apps, or
security keys when available.

• Keep your devices updated. Install operating system, browser, application,
and security updates regularly.

• Think before clicking. Verify unfamiliar links, attachments, QR codes, and
unexpected messages before interacting with them.

• Never share verification codes. Do not provide passwords, recovery codes, or
sign-in approval codes to unexpected callers or messages.

• Be cautious with remote access. Never allow an unexpected caller to install
software or control your device.

• Maintain reliable backups. Keep important files backed up, including at least
one copy protected from accidental deletion or ransomware.

• Review account activity. Periodically check financial transactions, connected
devices, account sessions, and recovery information.

• Ask when something feels wrong. Contact the organization independently or ask
someone you trust before taking action.

7. Quick Post-Service Checklist

☐ Device assessed and returned to safe use

☐ Primary email password unique and two-factor enabled

☐ Unknown sessions and devices signed out

☐ Financial institutions contacted and cards/accounts reviewed

☐ Credit freezes or fraud alerts considered (if identity information was exposed)

☐ Recovery codes stored in a safe place

☐ This Quick Reference and the full guide kept for future use

8. Trusted Places to Start

Always type these addresses yourself. Do not click links in unexpected messages.

• Identity theft recovery: IdentityTheft.gov

• Free credit reports: AnnualCreditReport.com

• Breach check (email only): HaveIBeenPwned.com

• IRS Identity Protection PIN: IRS.gov/IPPIN

• Report internet crime: IC3.gov

9. Your Full Guide & Next Steps

This Quick Reference covers the essentials. Your complete Digital Security Incident Response
& Recovery Guide contains detailed chapters on devices, email investigation, account
security, financial protection, myths, FAQs, and worksheets. Keep both. Use the full guide when
you want deeper understanding or when your service report points you to a specific chapter.

You are not alone. Asking questions is a strength, not a weakness.