Contain
Disconnect a suspicious device if malware is possible. Pause payments, stop remote-access sessions and avoid using the compromised account for recovery work.
+44 (0)1743 668200Been Hacked Fix Cambridge
If your email, Microsoft 365, website, social-media account, online banking, domain name or device has been compromised in Cambridge, start with containment before changing passwords or deleting evidence.
First 30 minutes
Secure the accounts that control the rest
For Cambridge households and small businesses, one compromised mailbox, Microsoft 365 account, domain login or website admin account can quickly become a wider incident. Attackers may reset other services, intercept invoices, alter DNS or message customers while pretending to be you.
Use a clean device to coordinate recovery. Keep screenshots, email headers, sign-in alerts, payment requests and recovery messages. If you run a business, tell the people who approve invoices or supplier changes which route is safe to use.
What happenedSafe first action
Microsoft 365 or email compromiseReview sign-ins, MFA methods, mailbox rules, forwarding, delegates and administrator access.
Website, domain or hosting concernSecure registrar access, DNS records, hosting users, CMS admins and recent plugin or file changes.
Device, social media or bank concernPreserve alerts and messages, stop using the affected device and contact your bank using a known number.
Secure
From a clean device, reset priority passwords, remove unknown sessions, check recovery details and strengthen MFA on email, banking, websites and social accounts.
Recover
Check what may have been accessed, restore safe access, verify backups and tighten working practices so the attacker cannot simply return.
Cambridge business risks
Email, suppliers and payment checks matter
Cambridge businesses often work across Cambridgeshire and nearby areas such as Ely, Huntingdon, Newmarket. A hacked inbox can make fake invoice or bank-detail changes look like normal business conversation.
That matters for technology, research, professional services, healthcare suppliers and charities. Check whether the attacker created forwarding rules, changed recovery details, added OAuth apps, used remote-access tools or accessed cloud files.
Useful Cambridge-specific recovery checks
If your website or domain is affected, secure the registrar and DNS first so recovery emails, website traffic and email routing cannot be redirected. If Microsoft 365 is affected, review administrator roles and mailbox access before assuming a password reset is enough.
For money at risk, contact your bank immediately using a known number. For fraud reporting in England and Wales, use Report Fraud. For independent cyber guidance, use the NCSC guidance for small organisations.
Get help now
Call for Cambridge cyber recovery help
If you think an account, device, website or business email has been compromised, call before making rushed changes. A calm first call can help protect evidence, reduce damage and prioritise the accounts that matter most.
Call +44 (0)1743 668200 for practical next steps.
Frequently asked questions
What should I do first if I have been hacked in Cambridge?
Stop using the affected account or device for recovery work. Preserve login alerts, payment messages, emails and screenshots, then use a separate trusted device to secure banking, email and Microsoft 365 first.
Can you help Cambridge businesses with Microsoft 365 or email compromise?
Yes. We can help review sign-ins, mailbox rules, forwarding, delegated access, MFA methods, administrator accounts and recovery settings so the attacker is not still able to monitor or regain access.
Do you only help inside Cambridge city centre?
No. This Cambridge recovery page covers Cambridge and nearby areas including Ely, Huntingdon, Newmarket, Royston, St Neots.
Should I wipe my device or rebuild my website straight away?
Usually not. Secure the account, domain, hosting or device route first. Rushed wiping or rebuilding can remove useful evidence and may leave the original access route open.
Get practical cyber recovery help in Cambridge
Tell us what happened, what is affected and whether money, customer data or business systems may be at risk.