Digital Emergency Response

Account Hacked or Compromised

Immediate Actions (First 10 Minutes)

1. Change Password Immediately (if you still have access)
   • Use a different device if possible
   • Create a strong, unique password
2. Enable Two-Factor Authentication if not already active
3. Check Recovery Information
   • Verify email and phone number are yours
   • Remove any unauthorized recovery methods
4. Review Recent Activity
   • Check login history
   • Look for unauthorized posts or messages
   • Review connected apps and devices
5. Alert Your Contacts
   • Warn friends that your account may send spam
   • Post a notice if possible

Next Steps (First Hour)

• Log out of all devices and sessions
• Remove suspicious apps or browser extensions
• Run antivirus scan on your devices
• Check linked accounts (email, payment methods)
• Report hack to platform support
• Document everything with screenshots
• Change passwords on other accounts using same password

Platform-Specific Recovery

Platform	Recovery Link
Google/Gmail	accounts.google.com/signin/recovery
Facebook	facebook.com/hacked
Instagram	help.instagram.com/contact
Twitter/X	help.twitter.com (search "hacked")
Apple ID	iforgot.apple.com
Microsoft	account.live.com/acsr

Identity Theft Detected

Immediate Actions

1. Place Fraud Alert
   • Contact one credit bureau (Equifax, Experian, TransUnion)
   • They'll notify the others
   • Initial alert lasts 1 year, free
2. Review Credit Reports
   • Get free reports from annualcreditreport.com
   • Look for unauthorized accounts or inquiries
   • Document suspicious activity
3. Report to FTC
   • Visit IdentityTheft.gov
   • Create recovery plan
   • Get official identity theft report
4. File Police Report
   • Bring FTC report and documentation
   • Get copy of police report
   • Use for disputing fraudulent charges
5. Contact Financial Institutions
   • Close compromised accounts
   • Open new accounts with fraud alerts
   • Dispute unauthorized transactions

Long-term Protection

• Consider credit freeze for all bureaus
• Monitor credit reports regularly
• Sign up for identity theft protection service
• Review all financial statements monthly
• Keep detailed records of all steps taken

Harmful Content Encountered

Types of Harmful Content

• Child sexual abuse material (CSAM)
• Extreme violence or gore
• Self-harm or suicide content
• Terrorist or extremist material
• Non-consensual intimate images

Response Protocol

1. Stop Viewing Immediately - Close window/app
2. Do NOT Share or Screenshot - This can be illegal
3. Report to Platform - Use reporting tools
4. Report to Authorities
   • CSAM: NCMEC CyberTipline (cybertipline.org or 1-800-843-5678)
   • Other illegal content: FBI IC3 (ic3.gov) or local police
5. Seek Support
   • Talk to trusted adult
   • Consider counseling if traumatized

Online Threats or Harassment

Immediate Response

1. Document Everything
   • Screenshot all messages with dates/times
   • Save URLs and usernames
   • Don't delete anything yet
2. Do Not Respond - Engaging can escalate
3. Block the Person - On all platforms
4. Report to Platform - Use built-in reporting
5. Tell Someone - Parent, teacher, or trusted adult

When to Contact Police

Contact local police immediately if threats include:

• Physical violence or harm
• Sexual assault or exploitation
• Stalking behavior
• Threats to others
• Extortion or blackmail
• Sharing of intimate images without consent

Additional Resources

• Crisis Text Line: Text HOME to 741741
• National Suicide Prevention Lifeline: 988
• RAINN (Sexual Assault): 1-800-656-4673
• Cyberbullying Research Center: cyberbullying.org

Device Lost or Stolen

Immediate Actions

1. Use Find My Device
   • iPhone/iPad: iCloud.com/find
   • Android: android.com/find
   • Windows: account.microsoft.com/devices
   • Mac: iCloud.com/find
2. Lock Device Remotely - Set lock screen message with contact info
3. Change Important Passwords (from another device)
   • Email
   • Banking/financial
   • Social media
   • Cloud storage
4. Contact Carrier - Suspend service to prevent unauthorized use
5. File Police Report (if stolen) - Get report number for insurance
6. Contact Insurance - If you have device insurance or homeowner's policy
7. Erase Device Remotely (last resort if recovery unlikely)

Prevention for Next Time

• Enable Find My Device before loss occurs
• Keep serial number recorded separately
• Regular backups to cloud
• Strong passcode/biometric lock
• Don't store passwords in plain text
• Consider device insurance

Scam or Phishing Attempt

If You Clicked a Suspicious Link

1. Don't Panic - Quick action can prevent damage
2. Disconnect from Internet - Stop potential malware download
3. Run Antivirus Scan - Full system scan
4. Change Passwords (from clean device)
   • Start with email and banking
   • Then other important accounts
5. Monitor Accounts
   • Check for unauthorized transactions
   • Watch for suspicious activity
   • Review account access logs
6. Report Phishing
   • Forward email to reportphishing@apwg.org
   • Report to FTC at ReportFraud.ftc.gov
   • Alert the impersonated company

If You Gave Financial Information

• Contact bank/credit card company immediately
• Freeze cards if necessary
• Monitor accounts daily for fraudulent charges
• Place fraud alert on credit reports
• File report with FTC at IdentityTheft.gov

Emergency Contact List

Emergency Type	Contact	Phone/Website
Immediate Danger	Emergency Services	911
Child Exploitation	NCMEC CyberTipline	1-800-843-5678 cybertipline.org
Identity Theft	FTC	IdentityTheft.gov
Internet Crime	FBI IC3	ic3.gov
Suicide/Crisis	988 Lifeline	988 or 988lifeline.org
Crisis Support	Crisis Text Line	Text HOME to 741741
Sexual Assault	RAINN	1-800-656-4673
Fraud/Scams	FTC	ReportFraud.ftc.gov

Emergency Preparedness

Before an Emergency

• Enable two-factor authentication on all accounts
• Use password manager with strong unique passwords
• Enable Find My Device features
• Regular backups of important data
• Keep list of account recovery information
• Know how to contact platform support
• Save emergency contact numbers
• Discuss digital emergencies with family
• Know where to report different types of incidents

Create Your Emergency Plan

Fill out and keep accessible:

• List of all online accounts and associated emails
• Location of password manager master password (secure location)
• Device serial numbers
• Important contacts (family, IT support, authorities)
• Recovery codes for important accounts
• Insurance policy numbers