Networks & Cybersecurity

What should I do if an employee clicked a phishing link?

Disconnect the affected session/device from risky activity if appropriate, do not delete evidence, report the message/link and whether credentials were entered, change compromised credentials from a trusted device and contact support if…

DHF-IT-013BeginnerLast reviewed 10 Sep 2026V10092026.1.1
Quick answer

Disconnect the affected session/device from risky activity if appropriate, do not delete evidence, report the message/link and whether credentials were entered, change compromised credentials from a trusted device and contact support if risk is significant.

What to do next

If this answer does not fully match your situation, do not guess on a production, security, payment or data-related change. Contact DAIM HUB with the affected service, what happened, when it started, business impact and any safe screenshots or error messages.

Project terms take priority

Help Centre content is general guidance. Your final signed project Scope of Work and agreed terms and conditions take priority where they differ from a Help Centre answer.

WA