Personal Blog

When you hear about phishing attacks in the news, it always feels like something that happens to “other companies.” That’s exactly how our team used to think—until it happened to us. The experience shook our confidence, disrupted our daily workflow, and forced us to reimagine how we protect sensitive information. In this post, I want to share our journey through a phishing incident, how we managed Google Workspace breach recovery , the lessons we learned, and the security practices we now live by. The Day It Happened It started with a seemingly harmless email that mimicked a common vendor we often deal with. The subject line looked routine, the branding in the email was convincing, and one of our team members clicked the link without second-guessing it. Within hours, we noticed unusual login attempts across multiple Google Workspace accounts. Our inboxes were flooded with security alerts. Files were being accessed in Google Drive that had no reason to be touched. Worst of all, we reali...

In today’s world, technology is no longer an option — it’s a necessity. From checking our bank accounts online to using social media and working remotely, our daily lives are more connected than ever. While this connectivity makes life easier, it also brings risks that often go unnoticed. We hear about data breaches, phishing scams , or ransomware attacks almost every day, and it’s natural to feel uneasy about how secure our personal and professional data really is. This is where a Cyber Risk Assessment can make a difference. What is a Cyber Risk Assessment? At its core, a Cyber Risk Assessment is a process that helps identify potential threats to your digital world, analyze the level of risk they pose, and provide practical ways to reduce those risks. Think of it as a health checkup for your digital life. Just as a doctor identifies early symptoms before they become serious problems, a Cyber Risk Assessment uncovers weaknesses in your online security before they can be exploite...