What should we do first if we suspect a leak?

Preserve the evidence: devices, logs, emails and access records, with a documented chain of custody, because electronic evidence must meet the Bharatiya Sakshya Adhiniyam, 2023. Then move quickly. Courts grant ex parte injunctions and search orders when the case is clear and the application is made without delay.