Agency owners: book a free 30-minute operations diagnostic. We’ll identify the bottleneck limiting your time, capacity, or growth and determine the operational plan to fix it.

Everyone is getting hacked. Big enterprise, SMB and us!...agencies.

Every month I meet another agency owner who got hacked, or I get a phishing email from an old contact whose inbox got taken over.

This week, 28, GoDaddy emailed customers that an attacker spent weeks pulling contact details out of their website product through a tech back door, starting September 18. GoDaddy called it the first AI-driven attack it has seen. The notice landed in my inbox like it landed in a lot of yours.

I encourage you to use this as a nudge to take get your security in place.

I’ve worked with over 1,250+ agencies. Almost all of them have a system for sales, delivery and finance. Very few have one for security….which seems NUTS!

Security should run without you and protect yourself & clients.

When I got the Godaddy email this week, I asked the CEO of Uhoh (thebest IT service that helps many agencies) what I should tell clients. He shared the following 4 tips:

Two-factor on everything

Anything that touches client money or data. Wherever your domains live, Google Workspace, every ad account, your password manager.

Use an authenticator app, not text codes, wherever you can.

Run an access audit.

Who still has logins to client accounts that shouldn't? Check old contractors first. Then every AI tool you've connected to client data.

Implement this rule

“Nobody sends a password, a code or payment info because an email or call asked for it. Ever.”

My engineer member got a text last quarter from a fake Jordan Ross asking for client info and login info. He almost fell for it. Educate your team!

Domain lockdown.

Turn on the registrar lock so nobody can transfer your domain, and have your IT person set up the three email settings (SPF, DKIM and DMARC) that stop someone emailing your clients pretending to be you. It takes about an hour.

If you’re like me and want the pros to help you out, get a security consult from my friends at Uhoh. Truly one of the best companies I’ve ever interacted with.

I’ve had clients lose 100s of thousands this year because they got hacked and weren’t prepared.

The downside is not worth the headache.

Do it DIY or hire someone to run it for you.

I don’t care what you do. Just do something.

And when you’re done with that enjoy trick or treating.

Book a free 30-minute operations diagnostic. We’ll identify the bottleneck limiting your time, capacity, or growth and determine the operational plan to fix it.

Whatever you do, do not click this; it’s a trap to catch bot clicks here.