If you suspect a cyber attack, immediately isolate affected systems from the network to prevent spread, do not turn off computers as this may destroy forensic evidence, document everything you observe including times and symptoms, contact your IT security provider or Mercury IT's incident response team, and avoid paying any ransom demands before receiving expert advice. Time is critical—the faster you respond, the more options you have for recovery. Mercury IT provides 24/7 incident response support for managed security clients.