← Years 7–8 Digital Systems

Responding to a suspected compromise

If an account or device may be hacked, act fast: tell a trusted adult, change the password, turn on MFA and check for odd activity. Also report phishing, change shared passwords and scan for malware.

Part of: 7-8 Digital Technologies Vic Curric - Digital Systems and Security — Module 74, 9-10 Digital Technologies Vic Curric - Digital Systems and Security — Module 83, VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 132, ACARA Digital Technologies Years 7–8 — Networks and Cyber Threats — Module 35, ACARA Digital Technologies Years 9–10 — Cyber Security Threats and Vulnerabilities — Module 93

Understanding Responding to a suspected compromise in Years 7–8 Digital Systems

What it does: Telling a trusted adult quickly means you get help to fix the problem and limit the damage, which is the first step in responding to a compromise. Hackers try a stolen password on other sites, so changing every account that shares it stops the compromise from spreading. Deleting the text does not fix a stolen password. Change it on the real site and turn on MFA so the old password is not enough. MFA adds a second check, so a thief needs more than just your password. Never share passwords with friends. Reporting phishing helps others get protected. Forwarding it to friends could spread the scam.

Common mistakes: If an account may be hacked, you should tell a trusted adult quickly. Keeping it secret lets the damage grow. The line should be ' tell a trusted adult'. After scanning for malware you must check the results and deal with any threats. Ignoring them leaves the device at risk. It should be ' check the scan results'.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Responding to a suspected compromise to a class →

This module's key terms are also in a printable crossword (Modules 26–74) and word search (Modules 4–74).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
You think someone has logged into your game account. What should you do first?
Tell a trusted adult and change your password straight awayWait a week to see if anything else strange happens
Matches
My account was hacked, but I will wait a week and see what happens
↓
Waiting lets the hacker keep access and cause more harm. You should act quickly: tell a trusted adult, change the password, turn on MFA and check for odd activity.
Applying
Meanings
Term
Respond to a compromise
Meaning
If an account or device may be hacked, act fast: tell a trusted adult, change the password, turn on MFA and check for odd activity. Also report phishing, change shared passwords and scan for malware.
Practice
IF account may be hacked THEN
Testing
Gaps
tell()
Check Answer
Spots
1IF account may be hacked THEN
2 keep it secret from everyone

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Octopus' badge — Multi-Tasker, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. You think someone has logged into your game account. What should you do first?
A. Tell a trusted adult and change your password straight away ✓
B. Wait a week to see if anything else strange happens
Acting quickly limits the damage. Tell a trusted adult and change the password as soon as you suspect a problem.
2. You clicked a link in a text and then entered your password on the page. Which is the better response?
A. Change the password on the real site and turn on MFA ✓
B. Delete the text and hope nothing happens
Deleting the text does not fix a stolen password. Change it on the real site and turn on MFA so the old password is not enough.
3. You use the same password for your email and your music account. Your music account is hacked. What should you do?
A. Change the password on your email and any other account that shares it ✓
B. Only change the music account password and leave the rest
Attackers try a stolen password on other accounts. Change it everywhere it was used and make each one unique.
4. Which action helps protect an account that may be compromised?
A. Share the new password with a friend to keep it safe
B. Turn on multi-factor authentication (MFA) ✓
MFA adds a second check, so a thief needs more than just your password. Never share passwords with friends.
5. You get a phishing email pretending to be your school. What is the best thing to do?
A. Forward it to all your friends as a warning
B. Report it to a trusted adult or your school's IT team ✓
Reporting phishing helps others get protected. Forwarding it to friends could spread the scam.

Match the Pairs

Change the password now → Replace the old password with a new, strong, unique one so a hacker who knows the old one is locked out
Turn on MFA → Add a second proof of identity, such as a code on your phone, so a stolen password alone cannot open the account
If you think an account or device has been hacked, get help from a trusted adult straight away → Tell a parent, carer or teacher now
If you used the same password on other accounts, change it on every one of them → Reset the shared password on all other accounts
My account was hacked, but I will wait a week and see what happens → Waiting lets the hacker keep access and cause more harm. You should act quickly: tell a trusted adult, change the password, turn on MFA and check for odd activity.
I clicked a scam link, so I will ignore it and never run a malware scan → Ignoring the problem leaves any malware on the device. You should scan for malware, report the phishing message and change your passwords.

Key Term

Respond to a compromise
If an account or device may be hacked, act fast: tell a trusted adult, change the password, turn on MFA and check for odd activity. Also report phishing, change shared passwords and scan for malware.

Fill in the Blanks

1. IF suspectedCompromise THEN tell(trustedAdult) END IF
Hint: Type who you should tell straight away when you think an account was hacked.
2. FOR EACH account IN sharedList changePassword(account) NEXT
Hint: Type the function name that sets a new password on every other account sharing the old one.
3. changePassword(email) turnOn(MFA) check(activityLog)
Hint: Type the short name for the extra login step that still protects an account if the password is stolen.
4. IF deviceActingOdd THEN runScan(malware) END IF
Hint: Type the kind of harmful software that a security scan looks for.
5. IF isPhishing THEN report(message) END IF
Hint: Type the action word for telling the school, service or authorities about a scam message.

Spot the Error

Question 1
A IF account may be hacked THEN
B keep it secret from everyone
C change the password
D END IF
Line B — If an account may be hacked, you should tell a trusted adult quickly. Keeping it secret lets the damage grow. The line should be ' tell a trusted adult'.
Question 2
A IF device acts strangely THEN
B tell a trusted adult
C run a malware scan
D ignore any scan results
E END IF
Line D — After scanning for malware you must check the results and deal with any threats. Ignoring them leaves the device at risk. It should be ' check the scan results'.
Question 3
A FOR each phishing message
B do not click the link
C reply to the sender
D delete it
Line C — Replying to a phishing message tells the scammer you are there and may give away details. You should report it as phishing instead.
Question 4
A IF password was safe THEN
B change the password
C turn on MFA
D END IF
Line A — The response steps are for when a password may be stolen or compromised. The condition should be 'IF password was stolen THEN', not 'safe'.
Question 5
A IF hacked pw is reused THEN
B FOR each account using it
C keep its old password
D END FOR
E END IF
Line C — If a hacked password is used on other accounts, those accounts are at risk too. Each one needs a new password, so the line should be ' change its password'.

Student with a class code? Join your class →