Tick what applies, add a few notes, and select Build my worksheet. The text appears below with buttons to download or copy it. It never leaves your device unless you send it. Do not include passwords, admin logins or security keys.
If visitors are being harmed right now, put up a maintenance page first and come back to this. Our guide to the first steps after a hack explains how.
What to do with the file
Keep a copy somewhere other than the website. If you contact your host or a developer, attach it to your email so they start with the facts. If you contact us, the same file saves a round of questions; our contact page explains what happens next.
If the incident may involve customer data, the dates and details you record here also help with any assessment under the Notifiable Data Breaches scheme. See our data breach guide for who is covered.
Questions people ask
Is anything I type sent to you?
No. The worksheet runs entirely in your browser. Nothing is sent to us or anyone else unless you choose to attach the file to an email.
Why does it warn me about passwords?
Because passwords should never sit in a text file that might be emailed or left on a shared computer. If your notes mention a password or key, the worksheet asks you to remove it before saving.
What if JavaScript is switched off?
The list of questions below works as a printable checklist. Copy the headings into an email or a document and answer them there.