--- title: "My Business Has Experienced A Security Breach: What Should I Do Now?" description: When your business experiences a security breach, a number of steps must be enacted immediately to mitigate its effect. image: https://blog.integrityts.com/hubfs/blog-files/shutterstock_218372422.jpg --- [![Integrity Technology Solutions](https://blog.integrityts.com/hs-fs/hubfs/IntegrityTechnologySolutions_February2026/images/integrity_color_logo.png?width=284&height=53&name=integrity_color_logo.png "Integrity Technology Solutions")](https://www.integrityts.com/) - [Who We Are](https://www.integrityts.com/who-we-are/) - [Our Team](https://www.integrityts.com/who-we-are/our-team/) - [Partners & Certifications](https://www.integrityts.com/who-we-are/partners-certifications/) - [NIST Cybersecurity Framework](https://www.integrityts.com/who-we-are/nist-cybersecurity-framework/) - [Careers](https://www.integrityts.com/careers/) - [Industries](https://www.integrityts.com/industries/) - [Financial Institutions](https://www.integrityts.com/industries/financial-institutions/) - [Healthcare](https://www.integrityts.com/industries/healthcare/) - [Insurance](https://www.integrityts.com/industries/insurance/) - [Manufacturing](https://www.integrityts.com/industries/manufacturing/) - [Services](https://www.integrityts.com/services/) - [Co-Managed IT Support](https://www.integrityts.com/services/co-managed-it-support/) - [IT Cybersecurity](https://www.integrityts.com/services/it-cybersecurity/) - [IT Support](https://www.integrityts.com/services/it-support/) - [Technology Advisement](https://www.integrityts.com/services/it-support/technology-advisement/) - [Managed Security](https://www.integrityts.com/services/it-support/managed-security/) - [RemoteFix Help Desk](https://www.integrityts.com/services/it-support/remotefix-help-desk/) - [Security Awareness Program](https://www.integrityts.com/services/it-support/security-awareness-program/) - [Managed Cloud Security](https://www.integrityts.com/services/it-support/managed-cloud-security/) - [Vulnerability Management](https://www.integrityts.com/services/it-support/vulnerability-management/) - [Managed Detection & Response](https://www.integrityts.com/services/it-support/managed-detection-response/) - [Managed Backup & Disaster Recovery](https://www.integrityts.com/services/it-support/managed-backup-disaster-recovery/) - [Teams Phones (Voice)](https://www.integrityts.com/services/it-support/teams-phones-voice/) - [IT Tool Kit](https://www.integrityts.com/services/it-support/it-tool-kit/) - [Password Management / LAPS – Copy](https://www.integrityts.com/services/it-support/password-management-laps/) - [Secure Cloud / Hosted Infrastructure](https://www.integrityts.com/services/it-support/secure-cloud-hosted-infrastructure/) - [Microsoft 365 Licensing/New Commerce Experience](https://www.integrityts.com/services/it-support/microsoft-365-licensing-new-commerce-experience/) - [IT Professional Services & Consulting](https://www.integrityts.com/services/it-professional-services-consulting/) - [Network Infrastructure](https://www.integrityts.com/services/it-professional-services-consulting/network-infrastructure/) - [Cloud Migrations](https://www.integrityts.com/services/it-professional-services-consulting/cloud-migrations/) - [Incident Response](https://www.integrityts.com/services/it-professional-services-consulting/incident-response/) - [SharePoint Consulting](https://www.integrityts.com/services/it-professional-services-consulting/sharepoint-consulting/) - [Security Risk Assessments](https://www.integrityts.com/services/it-professional-services-consulting/security-risk-assessments/) - [Tabletop Exercises](https://www.integrityts.com/services/it-professional-services-consulting/tabletop-exercises/) - [AI Capabilities](https://www.integrityts.com/services/it-professional-services-consulting/ai-capabilities/) - [Administrative Policies & Controls](https://www.integrityts.com/services/it-professional-services-consulting/administrative-policies-controls/) - [HIPAA Risk Assessments](https://www.integrityts.com/services/it-professional-services-consulting/hipaa-risk-assessments/) - [MIPS Consulting](https://www.integrityts.com/services/it-professional-services-consulting/mips-consulting/) - [SAFER Guides Consulting](https://www.integrityts.com/services/it-professional-services-consulting/safer-guides-consulting/) - [Pricing](https://www.integrityts.com/pricing/) - [Blog](https://blog.integrityts.com/) - [Contact](https://www.integrityts.com/contact/) # Blog ## My Business Has Experienced A Security Breach: What Should I Do Now? [Scott Stevens](https://blog.integrityts.com/author/scott-stevens) September 02, 2021 at 07:00 AM ![Equifax.jpg](https://blog.integrityts.com/hs-fs/hubfs/Images/Equifax.jpg?width=777&height=406&name=Equifax.jpg) Is your business prepared for a security breach?  It should be; [breaches have increased exponentially](https://www.statista.com/statistics/273550/data-breaches-recorded-in-the-united-states-by-number-of-breaches-and-records-exposed/) over the last 15 years. From 2005 to 2020, data breaches increased tenfold, and the amount of records exposed more than doubled.  In our experience, it’s only a matter of time before your business is breached—it’s a question of when, not if.  When your business experiences a security breach, a number of steps must be enacted immediately to mitigate its effect.    ## **Consult Your Incident Response Plan** The most important thing you can do when a breach happens is to consult your incident response plan. This means that an incident response plan must be drafted and reviewed prior to any breach in order to mitigate its effects.  The incident response plan assesses risks your organization faces, potential security issues you may have, and provides the steps you need to take when your business is breached.  The plan should also include the following steps in this article.    ## **Isolate and Stop The Event** The next step you should take is isolating and stopping the event so it doesn’t spread to other workstations and servers on your network.  Depending on the nature of the event, your team or your [managed security services provider](https://www.integrityts.com/services/) should be able to detect where the event is and prevent its spread.  One of the ways this can be done is with an [endpoint detection & response solution](https://blog.integrityts.com/endpoint-detection-response-legacy-antivirus).  EDR is the next generation of antivirus protection that collects information from workstations and servers, using artificial intelligence to detect any anomalies. In other words, EDR doesn’t require that a workstation goes down before it enacts protective measures.  By implementing EDR, we create a secure barrier around non-infected parts of the network and bring other workstations back online incrementally, which helps us detect where the issue is located.  Exact recommendations for isolating and stopping the event will depend on how your system has been breached.    ## **Communicate That An Incident Has Occurred** Once an event has occurred, it must be communicated to both internal and external audiences.  Internally, your employees should know about the incident. Explain what has happened and what they can do right away to prevent its spread.  Externally, your business may need to communicate to a group of stakeholders, a board of directors, or even investors.  Regulated entities also must report this to their appropriate regulatory body.  For instance, [healthcare](https://www.integrityts.com/services/healthcare/) and [financial institutions](https://www.integrityts.com/services/financial/) are the two most-breached businesses today. Healthcare organizations must report to the Department of Health & Human Services, while a bank or credit union may need to report to their chartering organization—the FDIC, the Federal Reserve, the OCC, or the state.    ## **Contact Your Insurance Provider ** If your business has a cybersecurity insurance policy, call your provider. They should be able to provide you with resources to start cleaning up a breach.  We’ve found that IT teams have been quick to wipe servers in order to mitigate a breach’s effect.  While it may be tempting, we plead with you to avoid this strategy.  By deleting information from your system, you eliminate evidence that can be provided to authorities, and your insurance provider may be less likely to cover damages.    ## **Contact Authorities** Speaking of authorities, they also must be contacted in the event of a security breach.  The [Internet Crime Complaint Center](https://www.ic3.gov/) (IC3) is a division of the FBI and allows you to file a complaint, as well as stay up to date with consumer and industry alerts.  Local authorities should also be involved. More often than not, we’re finding that law enforcement agencies have a detective assigned to cybercrime and can provide resources not otherwise available to civilians.    ## **Begin Data Recovery Procedures** Finally, we can enable [disaster recovery](https://blog.integrityts.com/use-this-disaster-recovery-plan-template-to-protect-your-business) procedures.  This involves running internal vulnerability scans and assessing patch reports to identify any security updates that need to be applied to servers or workstations.  Detecting and responding to a security breach is a challenging situation for everyone involved.  The most important action you can take is to draft an incident response plan before an incident happens—and, it’s a good idea to review it every 6-12 months to ensure it is current as cybersecurity issues evolve over time.  At least, your business should be conducting an annual cybersecurity assessment by [reviewing your data security posture](https://content.integrityts.com/data-security-checklist). If your business has been breached, please [contact us](https://www.integrityts.com/#contact) at Integrity to help with remediation. [![Take this 5-question quiz to find out how prepared your business is for a cybersecurity incident](https://no-cache.hubspot.com/cta/default/2136188/a6f0f1ce-d369-4e05-ba78-b0d9d02ab3d1.png)](https://cta-redirect.hubspot.com/cta/redirect/2136188/a6f0f1ce-d369-4e05-ba78-b0d9d02ab3d1) [Security](https://blog.integrityts.com/topic/security) ### Leave a Reply ## Read On ### [How To Build A Business Case For Manufacturing IT Projects Without Overcomplicating It](https://blog.integrityts.com/manufacturing-it-business-case/) Manufacturing IT projects are easier to justify when you stop treating them like technology... ### [Manufacturing Cybersecurity Without The Jargon: A Plain-English Guide For Operations Leaders](https://blog.integrityts.com/manufacturing-cybersecurity-plain-english/) Manufacturers don’t need a cybersecurity program built around buzzwords. They need technology that... ### [What Bank Cybersecurity Auditors Are Really Looking For](https://blog.integrityts.com/what-bank-cybersecurity-auditors-are-really-looking-for) Cybersecurity auditors are looking for more than technical problems or opportunities to issue... ## CONTACT US ### PROTECT YOUR BUSINESS. Integrity helps businesses dealing with sensitive data protect against looming cybersecurity threats. ### Address: 816 South Eldorado Road, Suite #4 Bloomington, IL 61704 ### Call Us: [+1 309.662.7723](tel:13096627723) ### Email: [info@integrityts.com](mailto:info@integrityts.com) [![x](https://blog.integrityts.com/hs-fs/hubfs/IntegrityTechnologySolutions_February2026/images/x.png?width=512&name=x.png "x")](https://x.com/integrityts) #### Customers: Need Assistance Now? ### Call Customer Support: [+1 888.764.8181](tel:18887648181) ### Email Customer Support: [remotefix@integrityts.com](mailto:remotefix@integrityts.com) #### Information & Sales [![Integrity Technology Solutions](https://blog.integrityts.com/hubfs/IntegrityTechnologySolutions_February2026/images/footer-logo.svg "Integrity Technology Solutions")](https://www.integrityts.com/) - [Who We Are](https://www.integrityts.com/who-we-are/) - [Industries](https://www.integrityts.com/industries/) - [Services](https://www.integrityts.com/services/) - [Pricing](https://www.integrityts.com/pricing/) - [Blog](https://blog.integrityts.com/) ©2026 [Integrity Technology Solutions](https://www.integrityts.com/). - [Privacy Policy](https://www.integrityts.com/privacy-policy/) - [Terms & Conditions](https://www.integrityts.com/terms-and-conditions/) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Scott Stevens", "url" : "https://blog.integrityts.com/author/scott-stevens" }, "dateModified" : "2021-09-02T13:55:16.170Z", "datePublished" : "2021-09-02T12:00:00.000Z", "headline" : "My Business Has Experienced A Security Breach: What Should I Do Now?", "image" : [ "https://blog.integrityts.com/hubfs/blog-files/shutterstock_218372422.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.integrityts.com/security-breach-what-should-i-do-now", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.integrityts.com/hubfs/Logos/integrity_1000x187.png" }, "name" : "Integrity Technology Solutions" } } ```