If individuals suspect they've been targeted in a masquerade attack, they should immediately report it to their organization's IT security team or system administrator. They should also change their passwords and enable additional security measures such as MFA to prevent further unauthorized access.