Good afternoon. We’re writing today because two of our clients were hacked within a week of each other, causing no small amount of disruption to their lives. This is a reminder about how to stay safe online.
- Do not click links in emails, even when the sender appears familiar. Instead, verify the message independently by calling the sender or by visiting the relevant website directly.
- Never engage with or reply to unexpected emails regarding charges, orders, inventories, or reports. If you receive an email detailing an order you did not place and want to check on it, find the company through Google and contact them directly to inquire.
- Never respond to urgent messages, pop-ups, screen takeovers, or phone calls claiming to be from Microsoft, the IRS, a court, a state revenue department, etc. Legitimate organizations generally will not demand immediate action, remote access to your computer, payment by gift card or wire, or sensitive information by email or phone. If you believe a matter may be legitimate, locate the organization’s official contact information through verified channels and call them directly.
- Avoid using Zelle, PayPal, Venmo, or similar services at a stranger’s request. This is particularly important when someone claims a payment is needed to “stop fraud,” issue a refund, or protect your account. Refer the person to their bank or vendor to resolve it.
- Use strong, unique passwords for every important account, especially your email and financial accounts. Reused or weak passwords can let someone who gains access to one account try to access others. Enable multi-factor authentication wherever available and change your password occasionally. This also includes using different passwords for social media accounts.
- Protect your email account carefully. Your email password can be hijacked and used to change passwords on other of your accounts.
- Keep your devices and home network secure. Use a password or screen lock on every computer and mobile device, including your router if you have one. Change your home Wi-Fi password periodically—especially after sharing it with a visitor.
- Log out of websites and services when you are finished. Do not leave accounts signed in or leave devices unattended.
- Never email documents or send messages containing sensitive financial information. That includes brokerage and bank account numbers, SS numbers, tax documents, etc.
- Treat email as potentially public. If you would not be comfortable seeing your email on the front page of The New York Times, do not send it.
- If you believe your computer or account has been compromised, immediately stop using it. Get a professional to wipe the drive.
- Stay cautious and vigilant in your digital life. It’s the best way to prevent hacks these days, unfortunately. Cybercriminals often rely on urgency, fear, and confusion to persuade people to act before thinking.