Everyday IT fixes
I clicked a bad link or entered my password — what now?
The first ten minutes matter. Here's exactly what to do, in order.
Last reviewed 20 August 2026
Tell us immediately. Not tomorrow, not after you've had a look yourself. Fast reporting is the difference between a nuisance and a serious incident.
- 1Phone 01329 800651 and say you think you've been compromised.
- 2If you entered your password anywhere, change it now on a different, known-good device.
- 3Approve nothing — if MFA prompts keep appearing on your phone, deny them and tell us.
- 4If you downloaded or ran a file, disconnect that machine from Wi-Fi and unplug its network cable, but leave it switched on.
- 5Warn your finance team if the email involved an invoice or payment details.
What we'll do
- Revoke active sessions and reset credentials.
- Check the mailbox for hidden forwarding rules — the classic sign of a compromise.
- Review sign-in activity for anything from unexpected locations.
- Scan and, if necessary, rebuild the affected device.
- Write up what happened so you have a record.
Still stuck?
Log it with the helpdesk and a real engineer will pick it up — or book a call if you'd rather talk it through.