Hacked Account Report to a Service Provider
Draft hacked Account Report to a Service Provider with an escalation ladder and an evidence checklist.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
Write a report to a service provider that my account was taken over, asking them to secure it and tell me what was accessed. What I will tell you: provider [PROVIDER_NAME], account [ACCOUNT_DETAILS], date I noticed [DATE_NOTICED], suspicious activity [SUSPICIOUS_ACTIVITY], steps I have taken [STEPS_TAKEN]. The letter should list the suspicious events, ask for the account to be locked and recovered, ask what data was accessed, and request logs of logins by time and location. It should note that I have changed passwords elsewhere. Gather before drafting: the date I noticed, screenshots of alerts and suspicious activity, the email address and phone linked to the account, steps I have taken such as resetting passwords, and any payments made. What I can realistically request: locking and recovery of the account, a list of what was accessed, login logs, and reversal of unauthorised changes or charges. The usual pushback: "Please follow the standard recovery process." Answer by saying you started it and listing where it failed, and ask for a human reviewer. Begin with a timeline table for the hacked account report to a service provider (when, what, document), note what is missing, and then keep every date in the letter consistent with it. Provide the letter along with a 60-word cover note, next the steps to take for silence or refusal (security team, then the privacy authority if personal data was exposed), plus a proof checklist (screenshots, alert emails), plus a record-keeping tip. File the letter through their online complaint system, and download the submission receipt as a PDF and re-check the status weekly and log it. Compose the letter in my own voice as an ordinary person, without posing as counsel, and invent no credentials or bar numbers. Avoid reciting rules from memory, including time limits; take guidance only from [JURISDICTION] and [RELEVANT_LAW_OR_POLICY_IF_KNOWN], and add a line telling me to verify the exact law with a professional or my local consumer agency. Hold a level, factual and courteous tone, with nothing hostile or exaggerated, and set any date from [DEADLINE] and no other. Check my inputs for gaps before any drafting and tell me which statements are only my opinion. I need wording to review, not a legal opinion, so suggest checking with an adviser before I send anything important.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.
See an example result (fictional data)
To: Security Team, Orbit Cloud Storage Re: Account takeover, user ID 55-1208 On 9 June I received an alert of a login from a country I have not visited at 03:14. My password was changed and 40 files were deleted. I have reset my other passwords and turned on two-step sign-in. Please lock the account, restore the deleted files if possible, and send me the log of logins with times and locations. Please tell me what personal data may have been accessed. I attach the alert emails and screenshots. Regards, Tomas Weber Cover note: use the provider's recovery form too and keep reference numbers.
Illustrative only, made-up data. Your results will differ and must be reviewed.