My company server in Durgapur was hacked; what legal steps should I take?

Detailed Legal Analysis

If your company server in Durgapur has been hacked, it is crucial to take immediate legal steps to mitigate damages and ensure compliance with Indian cyber laws.

Here are the key steps you should follow:

• Assess the Situation:
  • Identify the breach and assess the extent of the damage.
  • Document all evidence, including logs, screenshots, and communications related to the breach.
• Notify Authorities:
  • Report the incident to the local police station in Durgapur. Under Section 66 of the Information Technology Act, 2000, hacking is a cognizable offense.
  • File a First Information Report (FIR) detailing the circumstances of the breach.
• Inform CERT-IN:
  • Notify the Computer Emergency Response Team - India (CERT-IN) within 6 hours of the incident as per the mandates set out in the Information Technology (Guidelines for Cyber Security Resilience and Cyber Security Incident Reporting) Rules, 2020.
• Consult Legal Counsel:
  • Engage a lawyer who specializes in cyber law to understand your rights and obligations.
  • Discuss potential liability, insurance claims, and remedies available under the law.
• Notify Affected Parties:
  • If customer data or sensitive information has been compromised, inform affected clients in compliance with the provisions of the Personal Data Protection Bill, which emphasizes data breach notification.
• Implement Security Measures:
  • Strengthen your cybersecurity infrastructure to prevent future incidents.
  • Conduct a thorough security audit and review your company's cyber policies.
• Consider Civil Remedies:
  • If you suffer financial losses, consider filing a civil suit for damages against the perpetrator, if identified.

By following these steps, you can effectively address the hacking incident and protect your business under Indian laws.