$41K+ hijacking, fully recovered.
Read the case note: $41K+ hijacking, fully recovered.More than $41,000 of unauthorized spend, active malicious campaigns, and no documented timeline of how access was obtained. First-line platform support was responding with templates, and the evidence needed for a credit claim was degrading by the day.
My role: led the forensic response, the documentation, and the platform escalation end to end. Team: the client's internal IT secured the surrounding Google Workspace accounts.
