How to Report an Incident

If you suspect a cybersecurity incident has occurred, or is occurring, report it as soon as possible so that risk reduction measures can be started.

STATE EMPLOYEES

Contact the Information Security Division 

BUSINESSES & CITIZENS

Contact the Office of the Attorney General
Get AG Security Breach Notifications

Additional Resources

Start with Security: A Guide for Business

Careful Connections: Building Security in the Internet of Things

Cybersecurity for small businesses

Additional Information about reporting an incident

Internet-related crime, like any other crime, should be reported to appropriate law enforcement investigative authorities at the local, state, federal, or international levels, depending on the scope of the crime. Citizens who are aware of federal crimes should report them to local offices of federal law enforcement.

Each company will have their own security reporting procedure, but below are links that may assist.

Cyber attacks on businesses are at an all-time high, rising 300% in 2012 over the previous year. Each company will have their own security reporting procedure, but below are links that may assist.

What kind of incidents are there?

Phishing: Phishing attempts can be reported to the US-CERT at phishing-report@us-cert.gov.

Vulnerabilities: Vulnerabilities can be reported to the US-CERT at cert@cert.org or soc@us-cert.gov

Crime: Cyber crime can be reported to the Internet Crime Complaint Center at http://www.ic3.gov/default.aspx