про експерта

People reach me on the day someone else is reading their email, or when a supplier invoice arrives with quietly changed bank details. First we take the accounts back, kill the attacker sessions and find every other service that reused the same password. Then we work out what was actually seen or downloaded, because that decides who has to be told. For small companies I follow up with two-factor rollout, a password manager and a short phishing drill for staff.