Reporting Cybersecurity Threats

Cyber incidents can cause real harm. They include stolen data, malware, and attacks that stop systems from working. Businesses and people who use the internet can be affected. If you or your business has been affected, tell the right federal agency so they can help investigate and limit damage.

When to report — tell authorities if the incident:

  • leaked or lost a lot of data
  • stopped systems from working
  • shows attackers had access to critical systems
  • affects important infrastructure, the government, health, or many people

What to include when you report:

  • Your name and contact info
  • Who was affected (business or person)
  • What happened (short sentence)
  • When you first noticed it
  • What you already did (e.g., turned off a computer)
  • Any files, screenshots, or error messages

If you suspect an attack, do these three things now:

  • Disconnect the affected device from the internet (if safe).
  • Save any logs, screenshots, and suspicious emails.
  • Call the phone number above and your IT support.

 

Click Here for a More Detailed Explanation of Reporting Cyber Incidents
Department of Homeland Security Page

 

Key Federal Points of Contact

FBI Field Office Cyber Task Forces

Report cybercrime, including computer intrusions or attacks, fraud, intellectual property theft, identity theft, theft of trade secrets, criminal hacking, terrorist activity, espionage, sabotage, or other foreign intelligence activity to FBI Field Office Cyber Task Forces.

Internet Crime Complaint Center (IC3)

Report individual instances of cybercrime to the IC3, which accepts Internet crime complaints from both victim and third parties.

National Cyber Investigative Joint Task Force

NCIJTF CyWatch 24/7 Command Center: (855) 292-3937 or cywatch@ic.fbi.gov
Report cyber intrusions and major cybercrimes that require assessment for action, investigation, and engagement with local field offices of federal law enforcement agencies or the Federal Government.

United States Secret Service

Report cybercrime, including computer intrusions or attacks, transmission of malicious code, password trafficking, or theft of payment card or other financial payment information

United States Immigration and Customs Enforcement / Homeland Security Investigations (ICE/HSI)

Report cyber-enabled crime, including: digital theft of intellectual property; illicit e-commerce (including hidden marketplaces); Internet-facilitated proliferation of arms and strategic technology; child pornography; and cyber-enabled smuggling and money laundering.

Slider Remover

Slider Remover (Bottom of Page)