Finding out your business has been hacked is a horrible feeling. Your first instinct might be to panic, unplug everything, or start deleting files. But the first hour after you spot a problem matters a great deal. What you do — and what you don’t do — can decide whether a bad day becomes a major loss or a recoverable one.
Here are five first steps every Frederick County small business owner should know before they ever need them.
1. Don’t panic — and don’t delete anything
It is tempting to wipe a suspicious computer clean and start over. Resist that urge. Deleted files, cleared browser history, and reformatted drives can destroy the clues your IT support needs to figure out what happened, how the attacker got in, and whether they are still inside your systems.
Leave the affected computer as it is for now. Don’t run a full factory reset, don’t delete strange files, and don’t try to “fix” it by installing new security software on top of the problem. Your job in the first minutes is to contain the damage, not to investigate it yourself.
2. Disconnect the affected computer from the network
If one computer is acting strangely — showing ransom messages, sending emails you didn’t write, or running slowly with programs you don’t recognize — take it off the network. Unplug its ethernet cable or turn off its Wi-Fi. That simple step can stop malware from spreading to your other computers, your shared drives, and your business files.
If you are not sure which computer is affected, or if several are acting up, disconnecting your office network for a short time is better than letting a problem spread while you figure it out. You can always reconnect once your IT support gives you the all-clear.
3. Call your IT support right away
This is not a “wait until Monday” problem. The sooner a professional looks at it, the smaller the damage tends to be. Call your IT provider and tell them plainly what you are seeing: the strange messages, the odd emails, when it started, and which computers are involved. The more detail you give, the faster they can help.
If you don’t have an IT provider, call one now rather than trying to work through it alone. West Main Tech Services helps small businesses in Frederick County with exactly this kind of emergency, and you can reach the Middletown shop at (240) 490-9703. A quick call early on is almost always cheaper than a long cleanup later.
4. Change your passwords — from a clean device
Once you are off the affected computer, change the passwords for your most important accounts: your email, your banking, your accounting software, and your Microsoft 365 or Google account. Do this from a different device that you know is clean, such as your phone, not from the computer that was compromised.
Use a different password for each account, and turn on multi-factor authentication wherever it is offered. If your business uses shared logins — one password that several employees know — change those too, and consider giving each person their own login going forward. That way, if one account is compromised, it doesn’t hand over the keys to everything else.
5. Write down what happened, and who needs to know
While it is fresh, jot down a simple timeline: when you first noticed something wrong, what you saw, which computers or accounts were involved, and what steps you have already taken. This note helps your IT support, and it may matter later for your bank, your cyber insurance provider, or law enforcement.
Then think about who else needs to know. If customer information may have been exposed, you may have a duty to tell those customers — your IT provider can help you sort out what applies in Maryland. If money moved or your bank accounts were touched, call your bank right away about freezing transactions. Don’t be embarrassed about reporting it: businesses of every size get targeted.
The best time to prepare is before it happens
Nobody plans to get hacked, but every small business can plan its response. Keep a printed list of your IT provider’s number, your bank’s fraud line, and your insurance contact where you can find it even if your computers are down. Make sure your backups are actually running, and that someone on your team knows these five steps.
If you are not sure your business is ready for that bad day, that is worth a conversation now — before you need it. West Main Tech Services works with small businesses across Frederick County on backups, security, and day-to-day IT support. Call (240) 490-9703 and ask what a simple security checkup would look like for your business.
You can’t always stop an attack from happening. But with a calm, quick response, you can keep it from becoming a disaster.