What to Do When a Company Phone Is Lost

A lost company phone can expose email, files, and accounts. Having a clear process for a lost company phone limits the damage.
Act immediately
Report the loss to IT right away so they can lock or wipe the device. Time matters.
Remote lock and wipe
Use mobile device management to lock the device and erase company data. Display a message with contact details if appropriate.
Protect accounts
Change passwords, revoke sessions and tokens, and review sign-in logs for suspicious activity. Remove the device from trusted lists.
Assess the data risk
Determine what data was on the device and whether notification obligations apply. Encrypted devices with strong locks reduce risk.
Prevent next time
Require encryption, passcodes, and tracking features, and train staff to report losses quickly without fear.
Key takeaways
- Act immediately: Report the loss to IT right away so they can lock or wipe the device. Time matters.
- Remote lock and wipe: Use mobile device management to lock the device and erase company data. Display a message with contact details if appropriate.
- Protect accounts: Change passwords, revoke sessions and tokens, and review sign-in logs for suspicious activity. Remove the device from trusted lists.
- Assess the data risk: Determine what data was on the device and whether notification obligations apply. Encrypted devices with strong locks reduce risk.
- Prevent next time: Require encryption, passcodes, and tracking features, and train staff to report losses quickly without fear.
Putting it into practice
To apply this in your own organization, begin with a short assessment of where you stand on lost company phone today. Write down who owns it, which tools are involved, and the single biggest gap. Fix the highest-risk gap first, assign a clear date, and review progress after thirty days. Share what you learn with the team so improvements stick, and document the decisions you make so new staff can follow them. Revisit the topic every quarter, because threats, tools, and business needs change quickly, and small regular adjustments are far easier than large emergency fixes.
Common mistakes to avoid
Many teams struggle with lost company phone because they try to do everything at once, skip documentation, or treat it as a one-time project. Others rely on a single person who holds all the knowledge, or buy tools before defining the problem they need to solve. Avoid these traps by starting small, writing down simple procedures, spreading responsibility across the team, and checking results on a regular schedule. If something is not working, adjust quickly instead of abandoning the effort, and keep a short log of what you changed and why. That record makes future decisions faster and helps new colleagues understand the reasoning behind your approach.
Next steps
Reading about lost company phone is a good start, but results come from action. Pick one improvement you can finish this week, assign it to a named person, and set a date to check that it is done. Then choose the next item and repeat. Keep notes on what worked so your team builds a library of practical, tested steps rather than relying on memory. If you are unsure where to begin, start with the area that would cause the most disruption if it failed, because that is where careful attention pays back fastest.
Frequently asked questions
Should we wipe immediately?
If recovery is unlikely or data is sensitive, yes.
Can a locked phone be unlocked by thieves?
Rarely, but accounts should still be protected.
Final thoughts
Report fast, lock and wipe, and secure accounts.
Keep reading
- Endpoint Security
Insider Threats in a SaaS-Heavy Company

- Endpoint Security
Best Practices for Securing Office Printers

- Endpoint Security
Linux Server Hardening Basics

- Endpoint Security
Mobile Device Management for Small Businesses
