Contain and Preserve Evidence
Isolate affected systems, accounts or keys; preserve logs and evidence; stop further data loss; and notify the response owner.
Legal Centre
Data Breach Response Runbook
How suspected personal-data incidents are contained, assessed, notified and recorded.
Assess Risk
Identify data categories, affected individuals, sensitivity, likely harm and whether KYC/financial/auction evidence is involved.
Notify Where Required
If legally required, notify the ICO within 72 hours and affected individuals where there is high risk. Record reasons where notification is not required.
Remediate and Record
Rotate secrets, patch vulnerabilities, review access, document lessons learned and keep a breach register.
Independent advice
Property auction documents should be reviewed with appropriately qualified legal, financial, tax and surveying advisers before any binding decision is made.