Cyber attack
What to do if you're affected by a cyber attack in the UK — protect your money, data and services, and where to report it.
WHAT TO DO NOW
- 1If money or bank details are involved, contact your bank immediately using the number on your card.
- 2Disconnect the affected device from the internet (turn off Wi-Fi) but do not turn it off if advised to preserve evidence.
- 3Change passwords from a different, trusted device — start with email and banking; turn on two-factor authentication.
- 4Do not pay any ransom; report it to Action Fraud (0300 123 2040) or Police Scotland (101).
- 5Watch for follow-up scam calls, texts and emails pretending to help you recover.
- 6If essential services (NHS, payments, utilities) are disrupted, follow official advice and use offline alternatives.
What not to do
- Do not pay ransoms — it rarely restores data and funds crime.
- Do not click links or open attachments in unexpected messages.
- Do not reuse the same password across accounts.
What is it?
A cyber attack is a deliberate attempt to damage, disrupt or gain unauthorised access to computer systems, networks or data. It can hit individuals, businesses or national services.
What might happen?
Loss of access to accounts, money or files; disruption to websites, payments, NHS booking, transport or utility systems; scam messages exploiting the incident.
First 10 minutes
Secure your money and accounts first. Disconnect affected devices from the network. Note what happened and when.
First hour
Change key passwords from a clean device, enable 2FA, and run reputable security software. Report to Action Fraud. Warn family who share accounts.
First 24 hours
Monitor bank and email accounts for unusual activity. Keep evidence. Follow official guidance from the NCSC and affected service providers.
If it continues for several days
If national services are affected, expect staged recovery. Use official channels only; be extra alert to opportunistic scams and misinformation during the disruption.
Children
Talk to children about not sharing passwords or clicking unknown links; supervise account recovery.
Older & vulnerable people
Help older or less confident users reset passwords safely and spot scam 'support' calls.
Pets
No direct pet impact — but keep vet and microchip records backed up offline.
Communications
Keep a written copy of essential contacts and account recovery details offline in case you lose device access.
Official sources
This guidance is an editorial explanation of official UK advice. Always follow instructions from the authorities.
- GOV.UK — Prepare Published 2024-06-01