Switching everything off is not incident response. It is a bank shutting every branch because someone copied a teller's badge. https://www.theregister.com/security/2026/10/19/connectwise-turns-off-its-saas-y-backup-security-and-management-services-to-probe-security-snafu/5303758