Someone called us this week after losing control of multiple accounts — email, social media, and cloud services. They had already wiped and reinstalled Windows, expecting that to solve the issue.
It didn’t.
The attacker was still logged in.
The Common Misconception
Many people assume a “fresh install” removes a hacker. That’s only true if the threat is local (like malware on your PC).
But most modern account takeovers happen in the cloud — not on your device.
Once someone gains access to your account, they often:
Stay logged in on their own device
Add recovery methods (emails, phone numbers)
Register their own MFA or bypass yours
Connect third-party apps or sessions
So even if your computer is clean, your accounts are still compromised.
What Actually Fixes a Hijacked Account
To properly secure your accounts, you need to take control at the account level — not just the device.
Here’s the process we recommend:
Sign out of all active sessions
Most platforms allow you to log out of every device. This immediately cuts off the attacker.Reset passwords (properly)
Use strong, unique passwords for every account. Avoid reusing old ones.Reconfigure MFA (Multi-Factor Authentication)
Turn it off, then re-enable it from scratch. This ensures no unknown devices are still linked.Review connected apps and permissions
Remove anything unfamiliar or unnecessary.Check recovery details
Make sure only your email and phone number are listed.Only then — reinstall or clean your device
This step is last, not first.
The Real Risk: One Click
In many cases, these attacks start with a single click:
A phishing email
A fake login page
A malicious link sent via social media
That’s all it takes.
Practical Takeaway for Small Businesses
If you or your team rely on Microsoft 365, social media, or cloud platforms daily, account security is business security.
A compromised account can mean:
Lost client trust
Data exposure
Business interruption
And it often happens quietly.
A Simple Check You Can Do Today
Go into your main business accounts and:
Review active sessions
Check MFA status
Look at connected apps
You might be surprised what’s still connected.
If this sounds like your current setup, I’m happy to help you tighten it up.
What’s the biggest IT or security scare your business has had recently?
