Laptop with work data lost: what to do?

Losing a laptop that contains work data is stressful, but a fast, organized response can greatly reduce the risk of data breaches and other consequences. The steps below will help you act quickly and responsibly.

What to do first

1. Report to your IT or security team right away. They can remotely lock or wipe the device, revoke access tokens, and check for suspicious activity. Time is critical.
2. Change passwords for critical accounts from a different, trusted device. Start with your work email, VPN, cloud storage, and any single sign-on (SSO) accounts. Enable multi-factor authentication (MFA) if not already in use.
3. If theft is suspected, file a police report. Provide the serial number and any identifying details. This may be required for insurance or company procedures.
4. Notify your manager and follow your organization's incident reporting policy. Be honest and provide as much detail as possible about what data was on the device.

Step by step

1. Secure accounts: Change passwords for all work-related services and any personal accounts that were logged in on the laptop. Use a password manager to generate strong, unique passwords.
2. Revoke active sessions: In your account settings (e.g., Google, Microsoft, Slack), sign out of all sessions and remove the lost device from trusted devices.
3. Enable remote wipe: If your company uses mobile device management (MDM) or remote wipe tools, cooperate with IT to erase the laptop as soon as possible. For personal devices, use built-in tools like Find My Device (Windows, macOS) if enabled.
4. Check for unauthorized activity: Monitor your email, cloud storage, and other accounts for unusual logins or changes. Report anything suspicious to IT.
5. Document the incident: Write down what happened, when, and what data was on the laptop. This helps with investigations and any required reporting.
6. Consider identity theft protection: If personal information (e.g., customer data, employee records) was on the laptop, follow your company's data breach protocol and consider notifying affected parties as required by law.

What NOT to do

• Do not delay reporting hoping the laptop will turn up. Every minute increases risk.
• Do not try to recover the laptop yourself if it was stolen. Contact authorities.
• Do not reuse old passwords or use weak variations.
• Do not post details on social media that could compromise the investigation or reveal sensitive information.
• Do not ignore company policies on incident reporting; failure to report can have disciplinary consequences.

When to seek professional help

If the laptop contained highly sensitive data (e.g., personal health information, financial records, trade secrets), your organization may need to involve legal counsel, cybersecurity experts, or data protection authorities. Follow your company's guidance. If you suspect identity theft, contact your local police and consider a credit monitoring service.

How to prevent future incidents

• Use full-disk encryption and strong login passwords.
• Enable remote tracking and wipe features.
• Keep regular backups of important data.
• Avoid storing sensitive data locally; use secure cloud services with access controls.
• Never leave your laptop unattended in public places.

Acting quickly and following your organization's procedures will help protect both you and your employer. Start by reporting the loss to IT and changing your passwords.