Lost or Stolen Work Device: Report It Immediately
Lost or Stolen Work Device: Report It Immediately
A missing laptop, phone, tablet, security key, removable drive, or access badge is a security incident even when it is locked, encrypted, or “probably nearby.” The device may contain business data, saved sessions, authentication apps, customer information, or access to cloud services. Fast reporting gives Zerolimit the best chance to lock accounts, locate or remotely protect a managed device, and assess exposure.
Act now
- Move to a safe place. If you believe the device was stolen, do not confront anyone or return alone to an unsafe location.
- Contact Zerolimit immediately from another trusted device. Do not delay while searching, driving back, or waiting to see whether it turns up. Also notify your manager or designated internal contact according to company policy.
- Provide key facts: your name, device type, asset tag if known, phone number, last known location and time, whether it was locked, and what business data or accounts may have been accessible.
- Follow Zerolimit’s instructions for account protection. They may revoke sessions, disable the device, lock an account, rotate credentials, or use approved device-management tools. Do not improvise remote actions that could interfere with recovery or evidence.
- Report theft to local authorities when directed or when personal safety and policy require it. Keep the report number for the organization. Do not include unnecessary confidential business details in a public report.
Do not trust messages from “the finder”
Someone who has the device may send texts or emails claiming it was found, asking for the passcode, requesting that you remove it from device management, or sending a link to view its location. Do not provide a passcode, password, MFA code, recovery key, or device-management approval. Do not click a location link in an unsolicited message. Send the message details to Zerolimit.
Apple, Google, Microsoft, a mobile carrier, police, and Zerolimit will not need your unlock code to return a device. If a legitimate person finds it, arrange recovery through a safe, verified channel and keep Zerolimit informed.
Locating or erasing a device
Google’s official guidance for a lost Android device describes approved capabilities to find, secure, or erase a device when the required account and settings are available.[1] Microsoft also provides device-location features for supported Windows devices.[2] For a company-managed device, do not erase it or remove it from the company account unless Zerolimit authorizes the action. Remote erasure can be appropriate, but timing and legal, operational, and evidentiary needs matter.
Do not repeatedly attempt to sign in from unfamiliar kiosks or public computers to track the device. If Zerolimit asks you to use a personal device, type the official account address yourself and confirm you are on the genuine service.
If the device is recovered
Do not resume using it immediately. Do not unlock it, connect it to the office network, or plug it into another computer. Contact Zerolimit and explain where it was found, who had possession, whether it appears opened or damaged, and whether any accessories are missing. A device can be returned after someone attempted to access or tamper with it.
Zerolimit may inspect the device, review account activity, replace credentials, or reimage it before return to service. If the device was only misplaced in a secure area, the report is still worthwhile; security teams would rather close a false alarm than miss an exposure.
Personal information and carrier steps
If a phone with a company account is missing, Zerolimit may coordinate with you on carrier suspension, SIM protection, authenticator recovery, and replacement. Do not transfer the phone number or deactivate the old SIM before checking with Zerolimit, because sequence can affect account recovery. If personal payment cards or identity documents were also lost, contact their issuers through trusted numbers and follow the FTC’s identity-theft recovery guidance as appropriate.[3]
Prepare before loss happens
Use a screen lock, enable company-approved encryption and automatic updates, and never share the unlock code. Keep the asset tag recorded somewhere other than on the device. Use only approved backups and device-management tools. These controls help, but they never replace immediate reporting.