Creative IT
020 7394 2529Report an incident

HOME / BLOG

Ransomware and data recovery guides

Practical guidance on responding to ransomware and compromise, protecting evidence and getting data back, written for businesses and the people who look after their IT.

27 October 2026

The first 24 hours after a ransomware attack: what to do and what not to do

Isolate without switching off, protect your backups, keep the ransom note and evidence, and don't restore until you know how attackers got in.

Read the guide →