What should I do if my business is hacked?

General information from Lawmateanz

Act quickly to contain the incident, such as changing passwords, isolating affected systems, and contacting your IT provider.

Report the incident to the National Cyber Security Centre (part of the GCSB), which can provide advice. If customer or staff information may have been accessed, consider whether you must notify the Privacy Commissioner and affected people under the Privacy Act 2020.

Check your insurance for cyber cover and notify your insurer promptly.

Keep records of what happened. A lawyer can advise on your legal obligations and any claims.

Written by Lawmateanz, not by a lawyer. General information only, not legal advice about your situation. For advice about your own matter, talk to a lawyer.

Lawyers listed on Lawmateanz can answer this question. If you asked it, we'll email you as soon as it's answered.

Are you a lawyer? Answer this question · List free on Lawmateanz

General information only. Answers are written by independent lawyers based only on what's in the question. They aren't legal advice about your situation and don't create a lawyer–client relationship. For advice about your own matter, talk to a lawyer directly.