Case files.
What happened, what I did and what changed afterwards, from cyber incidents I've handled. Every story is anonymised, so no client is named or identifiable.
-
01
Invoice fraud · UK record label, around 15 staffRead the story
An invoice from the CEO. Except it wasn't.
How attackers spent months inside a UK record label's email, sent a £100,000 fake invoice from the CEO's own mailbox, and how the label was locked down within the hour.
-
02
Ransomware · Large UK online retailer, high-end interiorsRead the story
Ransomware, caught in the act.
How a large UK online retailer was hit by ransomware, how the attack was stopped mid-encryption with the attackers still on the server, and how everything was recovered without paying.
-
03
Ransomware · Westminster restaurant and private members clubRead the story
The forgotten laptop that played the music.
How ransomware on a forgotten laptop spread through Dropbox to every device at a Westminster restaurant and private members club, and how all the data was recovered the same day.
Dealing with something similar? Read how incident response works, or call 03333 401 999.
Dealing with a cyber incident right now?
Emergency response usually starts remotely within the hour, with a fixed £795 first response.