A company laptop goes missing. It may have been left in a rideshare, stolen from a car, or simply vanished between home and office. The longer the response takes, the higher the chance that whoever has the device can reach email, files, saved passwords, or connected services.
Speed matters more than perfection. These six moves, done in order, give a small team the best chance of limiting damage without specialized security tools.
Move 1: Confirm the Loss and Notify Immediately
As soon as the laptop is confirmed missing, the employee tells the owner, operations lead, or whoever handles devices and accounts. Do not wait until the next morning or until a thorough personal search is finished.
Note the approximate time and location of the loss. This information helps later if a police report or insurance claim is needed.
Move 2: Change the Most Important Passwords from a Different Device
Using a phone or another computer, reset passwords for:
Company email / Microsoft 365 or Google Workspace
Password manager
Banking or financial accounts
Any other high-value system the laptop may have been logged into
Sign out of other sessions where the option exists. Do this before assuming the device is unreachable.
If the laptop was unlocked or had a weak screen lock, treat every account that was accessible as potentially compromised.
Move 3: Trigger Remote Lock or Wipe (If Available)
Many small businesses have at least basic device controls through Microsoft 365, Google Workspace, or the endpoint protection console.
Attempt a remote lock first so the device cannot be easily used.
If the laptop contains sensitive data and recovery looks unlikely, proceed to a remote wipe.
If no remote management exists, move quickly to the next steps. The absence of remote control makes password resets and account lockdowns even more urgent.
Move 4: Revoke Active Sessions and App Access
In Microsoft 365, Google Workspace, and major SaaS tools, sign out all existing sessions for the affected user. Remove any remembered devices or app-specific passwords that may still grant access.
Check email forwarding rules and inbox rules for anything unexpected that may have been added.
Move 5: Assess What Data and Access Were on the Device
Quickly determine:
Was full-disk encryption turned on (BitLocker or FileVault)?
Were company files stored locally or mainly in the cloud?
Was the password manager unlocked or set to auto-fill?
Did the laptop have local admin rights or saved credentials for critical systems?
Encryption dramatically reduces the risk if the device was powered off or locked. Local files and unlocked password managers increase it. This assessment shapes how aggressive the remaining response needs to be.
Move 6: Document and Decide on Next Actions
Write a short record while details are fresh: when the loss was discovered, what accounts were reset, whether a remote wipe was issued, and what data was likely present.
Then decide:
Is a police report appropriate?
Does cyber insurance or a client contract require notification?
Should the employee receive a replacement device using the standard setup checklist?
Are there broader gaps (missing encryption, no remote management, weak screen locks) that need fixing for the rest of the team?
What Not to Do
Do not delay notification while hoping the laptop will reappear.
Do not reset passwords from the missing device if it somehow comes back online.
Do not assume encryption was enabled—verify if possible.
Do not overlook the password manager; it often holds the keys to many other systems.
Prevention That Makes the Next Loss Less Painful
The impact of a lost laptop drops sharply when a few basics are already in place:
Full-disk encryption enforced on every company device
Strong screen lock required
MFA on email and critical accounts
Password manager in use (so fewer credentials are saved in browsers)
Basic remote lock/wipe capability through existing Microsoft or Google tools
Standard new-device setup checklist that includes the above
These measures are operational, not exotic. They turn a potential crisis into a manageable inconvenience for most small teams.
Final Note
A lost laptop is one of the more common incidents small businesses face. The difference between a minor disruption and a serious exposure is usually the speed of the first response.
Change the critical passwords, lock or wipe the device if possible, revoke sessions, assess the data at risk, and document what was done. Those six moves protect the business while the longer-term decisions are sorted out.
Secure enough includes knowing exactly what to do in the first hour after a device disappears.
No feedback yet — submit the first.