How to Deal With a Data Breach

If your business suffers a data breach i.e. hackers access your system and steal confidential information then you have a lot to do to deal with the breach, communicate with all affected parties and put in place better security to prevent another breach.

How well you deal with the breach often affects the total cost and the level of damage to your business reputation.

These four steps can help:-

1.         Investigate the Breach

  1. How did it happen?
  2. What was stolen?
  3. Can the hackers regain entry to your systems?
  4. Have the hackers left any malware on your systems?

You’ll need to know exactly what information was lost in the data breach.

Less sensitive information includes name, address. phone number etc. This can be used by scammers and cold callers but that information is readily available for most people through the phone directory, social media and the Electoral register.

More sensitive information includes date of birth, name, financial details, payment card details etc.  Combined with the less sensitive information this can be used for identity fraud.

If the stolen data includes names with login and passwords then you need to act fast to warn people to change their passwords.

2. Determine the Possible Damage

Once you know what data has been stolen, you need to understand how this can affect people i.e. how this data can be used by criminals. Will they likely sell the information to a competitor or to other scammers or ransom it back to you?

3.         Communicate with All Interested Parties

You need to inform all affected parties ASAP.  This may be customers, partners, staff, suppliers etc. If the breach is serious then you should inform the Information Commissioners Office.  If relevant inform the Police.

4. Increase Your Security

Unless you have security experts, you may need to hire experts to assess your systems and see how security can be improved. Start enacting those improvements straightaway and of course close off whatever method the hackers used to get into your systems.

A data breach can be very serious and must be dealt with quickly and efficiently to minimise damage to your reputation.

 Do click on the Facebook or Twitter icons on top right to follow Fight Back Ninja.

Fightback Ninja Signature

Facebook Private Lotteries Legal

Lottery syndicates are legal and many people belong to one as syndicates can give you a higher chance of winning something although it also means that if you win it will be shared rather just yours.

However, gambling through Facebook Groups is not legal though hundreds of such groups exist.

Facebook users are being warned about illegal lottery groups which take money from members but don’t pay out.

The prizes promised include smartphones, cars, game consoles and cash prizes of up to £5,000.

Stakes of 50p to £20 are bet on the number of the Lotto bonus ball, with the administrator of the illegal raffle usually taking a large share of proceeds. Some may be rigged or the organisers simply disappear with all the stake money.

The law says that lotteries cannot be run for private or commercial gain. Gambling experts say these privately run groups encourage children to start betting.

Some groups do pay out, with the organisers taking a share of the money, while a few have been set up to raise money for charity or community campaigns, but according to the law lotteries cannot be run for private or commercial gain.

The Gambling Commission is working to close down these groups and it can also prosecute those found in breach of the law with a £5,000 fine or up to 51 weeks in prison.

If in any doubt, you can check the licence register on the Gambling Commission  website (www.gamblingcommission.gov.uk) or contact the local authority where the lottery is based.

Join a syndicate of people you trust and not through a Facebook Group.

Do leave a comment on this post – click on the post title then scroll down to leave your comment.

Fightback Ninja Signature

Don’t Give In to Ransomware Attackers


Ransomware is an attack that locks your computer and mobile devices or encrypts your electronic files. When this happens, you can’t get to the data unless perhaps by paying a ransom.

Paying the ransom is never recommended, mainly because it does not guarantee you will be able to decrypt your files plus it encourages the criminals and gives them funding for further criminal activities.

There are also a number of issues that can go wrong accidentally. For example, there could be bugs in the malware that makes the encrypted data unrecoverable even with the right key.

A ransomware attack is typically as a spam email attachment. Opening the attached file releases the malware onto the user’s system and it goes about it’s business of encrypting the files and deleting the originals. When complete, it puts up warning messages or screens demanding payment or the files will be lost forever.

The Nomoreransom Website

The website is at https://www.nomoreransom.org

“No More Ransom” is a public-private cooperation to tackle serious action cybercrime. The main aim is to share knowledge and educate users across the world on how to prevent ransomware attacks.

Plus, they believe that by restoring access to their systems where possible, it will empower users to take action and avoid rewarding criminals with a ransom payment.

The website contains four decryption tools for different types of malware. These are freely available and  will work for any user infected with the threats listed on the website.

Nomoreransom is associated with and works with various law enforcement agencies and anti-virus companies including Kaspersky, McAfee, Avast and Bitdefender

If you have any experiences with these scams do let me know, by email.

Fightback Ninja Signature

Fake Fraud Investigations

These scams usually start as phone calls warning you of something criminal going on. Of course, the scam caller doesn’t tell you she is the criminal.

The scammers intent is to convince you to move your money to an account of their choosing and there’s usually a complicated story to get to that point.

e.g. “I am a Police officer working in the fraud department and we are tracking a criminal team working with an insider at your bank. This insider has been trying to take money from your account and other people’s and we must catch him before he takes any more. We need your help to catch him out”.

So, that’s the setup phase, then comes the reason to move your money.

“To protect your money, we need to move it to a safe location that the criminals cannot access. Please move your money to the following sort code and account code and we’ll keep it safe for you and do remember not to contact your bank as they may tip off the criminals.”

Once the scammer has your money then it will be moved again to somewhere offshore where it cannot be traced and your money is gone.

Some people who have fallen for this scam or something similar blame the bank for moving their money, but if they are not told there is a problem and you request the move then why shouldn’t they do as asked.

Banks are aware of this scam and usually ask people trying to move their money out of the bank if they are under any duress or need advice.

Do not take instructions from a cold caller on the phone.

Just because someone claims to be from your bank or the Police doesn’t make it true.

Take care.

If you have any experiences with these scams do let me know, by email.

Fightback Ninja Signature