If pretexting is suspected, it is crucial to act quickly:
Immediately report the incident to the institution’s security officer or data protection officer. Conduct a thorough investigation to determine the extent of the breach. Notify the affected parties and provide guidance on steps they can take to protect themselves.
In severe cases, it may be necessary to involve law enforcement or legal professionals.