Leak - Farihunny

| Phase | Action | Owner | Status | Completion Date | |-------|--------|-------|--------|-----------------| | | Blocked malicious IPs, disabled compromised accounts | SOC Lead | Completed | 2026‑04‑03 | | Eradication | Patched vulnerable endpoint, rotated all privileged credentials | DevOps Team | In‑progress | – | | Recovery | Restored database from pre‑incident backup, re‑enabled services | Infra Team | Completed | 2026‑04‑04 | | Communication | Drafted breach notice to affected users, filed regulator report | Legal & PR | Completed | 2026‑04‑06 | | Post‑Incident Review | Conducted lessons‑learned workshop | IR Team | Planned | 2026‑04‑10 |