Follow these steps in order. Then call us.
469-293-2893Same-day response across Dallas-Fort Worth
An Employee Clicked a Phishing Email — Here's What to Do
What to Do Right Now
Disconnect their computer from the network
Don't shut it down — just unplug ethernet and disable WiFi. This prevents any malware from spreading to other machines on your network.
Have them change their password immediately
From a different device (their phone), change the password for whatever account they logged into on the phishing site. Then change their email password.
Enable multi-factor authentication
If the compromised account doesn't have MFA, add it now. This is the single most effective action — even if the hacker has the password, they can't get in without the second factor.
Check for sent emails
Phishing compromises often send emails from the victim's account to their contacts. Check the Sent folder for messages the employee didn't write.
Don't blame the employee
Phishing emails are sophisticated. Blaming employees makes them hide future incidents instead of reporting them. Focus on containment, not fault.
Call IT support for a full assessment
We check the computer for malware, verify network integrity, review what data may have been exposed, and strengthen defenses to prevent repeat incidents.
Need help right now?
Our technician comes to your Dallas-Fort Worth location same-day. Most issues resolved in one visit.
How to Know This Is Happening to You
- ⚠ Employee received an email that looked like it came from a boss, vendor, or known contact
- ⚠ They clicked a link and entered a password on an unfamiliar site
- ⚠ They opened an attachment that seemed off
- ⚠ Their computer started running slow after clicking
- ⚠ Contacts report receiving strange emails from the employee
- ⚠ New login alerts from unfamiliar locations
How We Fix This
1. Assess
We come to your location, identify exactly what happened, and explain your options before doing anything.
2. Fix
Professional cleanup, recovery, and repair — done at your home or office while you watch.
3. Protect
We close the vulnerability that caused this and set up defenses so it doesn't happen again.
Common Questions
How bad is it if an employee clicked a phishing link?
It depends on what they did after clicking. If they just clicked a link but didn't enter any credentials — you're probably fine. If they entered a password, that account is compromised and needs immediate action. If they downloaded and opened an attachment, assume malware and disconnect the machine.
Do we need to report a phishing incident?
If your business is in healthcare (HIPAA), finance (GLBA/PCI-DSS), or handles personal data, you may have mandatory reporting requirements. We help assess whether the incident triggers a notification obligation and document everything for compliance.
How do we prevent phishing attacks?
Three layers: email filtering to catch phishing before it reaches inboxes, multi-factor authentication on all accounts so stolen passwords aren't enough, and employee awareness so staff recognize and report suspicious emails. We set up all three.
Can you tell what data was stolen?
We analyze the phishing site, check email access logs, review what the employee's account had access to, and monitor for signs of data exfiltration. This assessment is part of our incident response service.
How much does incident response cost?
Our diagnostic, from $64.99, is the initial assessment at your office. Full incident response depends on scope: a single-machine phishing response takes less work than a network-wide compromise. We quote it before work begins.
From $64.99 diagnostic
Mobile service, we come to you. Farther-out DFW locations may be $84.99 (more than about 30 minutes out) or $109.99 (more than about an hour out), confirmed before booking. Repairs quoted on-site before any work begins.
Ready to Get Your Computer Fixed?
Professional computer repair services throughout Dallas-Fort Worth.
Same-day mobile service with 30-day warranty. We come to you!
We respond within 30 minutes.
Available 7 days a week