Microsoft 365 hacked: securing, reporting, communicating
An attacker gains unauthorised access to your Microsoft 365 or SharePoint environment and copies company data. ‘CrisisRadar’ helps you to secure accounts, inform those affected and the supervisory authority, and communicate transparently.
What happens
An attacker gains access to your Microsoft 365 or SharePoint environment and copies company data. This may also include personal data. The first step is to revoke access: reset passwords, secure accounts and block the attacker’s access. After that, communication is key. If personal data has been stolen, this constitutes a data breach which you must report to the Dutch Data Protection Authority within 72 hours. Data subjects and customers want to know what has happened and what it means for them. Internally, management, IT and the data protection officer must be on the same page straight away. Open and honest communication maintains trust.
From alert to clear communication
Securing accounts
Block access, reset passwords and secure the affected accounts.
Reporting and providing information
Report the data breach in good time and provide clear information to those affected and the supervisory authority.
Communicating transparently
Be open about what has happened and what you are doing about it, both internally and externally.
Who collaborates in this scenario
CrisisRadar brings all the parties involved into line, with a single shared situational picture.
- Access quickly restricted and accounts secured
- Data breach reported to the Dutch Data Protection Authority in a timely manner
- Stakeholders and customers are kept clearly and honestly informed
- Maintaining trust through transparent communication
Well prepared for this scenario?
In a short demo we show you how CrisisRadar helps, from preparation to the first minute of the crisis.