What actions should we take after our company laptop was stolen?

Let’s hope the drive was encrypted! You should definitely look into whether your other devices are secured as well. Consult with your legal team about possibly notifying your insurance provider about the incident. Good luck!

It’s a good start that you changed passwords. Also, if your system allows, consider forcing a sign-out or syncing to remove any cached access tokens. Speaking of which, if you’re utilizing MDM solutions, check if you can deploy a device lock that shows a message indicating it's a company property, just in case it turns up.

First things first, check if the laptop was encrypted. If the data was sensitive and the laptop had encryption, that’s a big relief. Also, file a police report if you haven’t done so already. Make sure to include the serial number so they can assist if it gets pawned. If you have the capability, initiating a remote wipe of the device would be a solid step too.

I recommend looking into what data might have been on that laptop. Was any confidential or sensitive data stored locally? If it has fallen into the wrong hands, you need to assess the potential exposure. Have you used any remote management tools? If so, you might have options to lockdown or wipe the device as soon as it connects to the internet.