Scope:The following steps will allow you to quickly response if a user/device is suspected to have been compromised.  Requirements:Access to Manager Portal ( Reseller and Higher )What to do if a user/device credentials are compromised.Set user permission to Deny AllLog in to the Manager Portal and navigate to DomainsNavigate to Users and click the affected userUnder the Profile tab, scroll down to Dial Planning and set Dial Permission to Deny All, and click saveRe-create the user deviceWhile you're in the user profile, click the Phones tab, make notes of the Mac Address if it's a hard phone device, Model, Record Calls setting, and Name.  Click Delete next to the affected deviceClick add phone, Enter the Phone Suffix you noted as name, select Record Calls setting and click Add button.  If this is a hard phone, select the model device, Set the Record Calls setting, and enter the MAC address and click Add.Reset Manager Portal Password and Voicemail PINGo to Users -> Select the affected user -> AdvancedClick Force Password Reset