
Somebody has clicked something. Money has gone to the wrong account. A mailbox is sending things you did not write. Files have been encrypted and there is a note asking for payment.
The first few hours matter more than anything you do afterwards, and most of the standard advice assumes you have an internal security team.
I can help you work out what has actually happened, stop it getting worse, and decide what has to be done in what order. That includes the parts people forget: preserving evidence before you wipe anything, whether this is reportable to the ICO and on what timescale, what to tell customers, and what your insurer and your bank need from you.
Afterwards, a short piece of work so the same route is closed and you know what to do if it happens again.
If you are in the middle of something now, get in touch and say so.
Take the first step to successfully starting and growing your business.