Security Incidents: What Should I Do?

If you suspect that your MtaaLex account, laptop, or firm data has been compromised, act quickly. Early action minimizes risk, prevents data disclosure, and protects your clients.

Follow the practical steps below for your specific situation.

---

Scenario 1: "I think someone knows my password"

Immediate Action Required:

1. Change Your Password Immediately:
   • Navigate to the login portal and click Forgot Password? (or open your profile account security settings).
   • Enter your work email to receive a secure password reset link.
   • Choose a new, long, unique password that you have never used before.
2. Sign Out on All Devices:
   • Changing your password immediately invalidates prior session tokens.
3. Notify Your Managing Partner:
   • Inform your firm administrator so they can monitor your account for any suspicious changes.

---

Scenario 2: "I left my MtaaLex account signed in on another computer"

(e.g., in a court registry, cybercafé, conference center, or colleague's laptop)

Immediate Action Required:

1. Change Your Password from Your Phone or Office Computer:
   • As soon as you change your password, MtaaLex immediately revokes all active session tokens across all browsers. The foreign computer will be logged out automatically.
2. Contact Your Firm Administrator:
   • Ask your Managing Partner to temporarily deactivate your account if you are unable to access the internet immediately. Once you are back in chambers, they can reactivate it.

---

Scenario 3: "I clicked a suspicious link or entered details on a strange page"

Immediate Action Required:

1. Do Not Enter Any Information: If you landed on a page asking for your MtaaLex password or M-Pesa PIN, close the tab immediately.
2. Change Your Password Right Away: If you already typed your password, navigate to the genuine MtaaLex login portal (https://mtaalexsolutions.co.ke) and reset your password immediately.
3. Scan Your Computer: Run a full system antivirus scan to ensure no malicious spyware was downloaded to your machine.
4. Report the Incident: Forward the fraudulent email or message to info@mtaalexsolutions.co.ke so our security team can take steps to block the scam.

---

Scenario 4: "My laptop, phone, or tablet was stolen or lost"

Immediate Action Required:

1. Notify Your Firm Administrator Right Away:
   • Call your Managing Partner or IT administrator immediately.
   • The administrator must go to Settings > Team & Organization and click Deactivate Account on your profile. This instantly revokes all access from the stolen device.
2. Remote Wipe Your Device (If Configured):
   • If your firm uses Google Workspace, Microsoft 365, or Apple iCloud (Find My), trigger an immediate remote lock or device wipe.
3. Assess Confidentiality Impact:
   • Review what downloaded documents, local drafts, or emails may have been stored on the device's hard drive so your firm can take necessary client protection steps under the Data Protection Act.

---

Scenario 5: "I see something unfamiliar in my account"

(e.g., a new case file you didn't create, an altered fee note, or an unfamiliar client inquiry)

Immediate Action Required:

1. Do Not Delete the Record: Keep the screen open so evidence of the change is preserved.
2. Check with Colleagues: In many law firms, an associate or partner may have legitimately opened the matter or reallocated a file.
3. Review the Firm Audit Trail:
   • Ask a Managing Partner to open /audit-logs.
   • The audit trail records the exact User ID, email, IP address, and timestamp of the action.
4. Contact MtaaLex Support:
   • If no one in your chambers made the change, contact MtaaLex support immediately at info@mtaalexsolutions.co.ke or call +254 704 020 449.

---

Official MtaaLex Support Contact

For all security-related emergencies and suspected compromises:

• Urgent Email: info@mtaalexsolutions.co.ke
• Direct Helpline: +254 704 020 449
• Location: Nairobi, Kenya
• Support Hours: Monday to Friday, 8:00 AM – 6:00 PM EAT (Emergency security alerts are monitored 24/7)