Practical steps
- Use the service’s official account-recovery channel.
- Change exposed credentials from a trusted device.
- Review active sessions, recovery contacts and connected applications.
- Preserve relevant notifications and records of unauthorised changes.
Here to help
Something doesn’t look right?
Prepare an incident report with the details that matter.