How to Report an Information Security Incident

Information on how to report an information security incident, including how to handle compromised machines with sensitive data.

For a fast response to any ongoing computer security incidents, please call the EITS Help Desk at (706) 542-3106 and provide details and contact information. The incident response team will contact you as soon as possible to get additional information and to provide instructions for the next steps to take in responding to the security incident.

If you cannot get assistance by calling the EITS Help Desk, you can report incidents via email at abuse@uga.edu. Response times may be slower for incidents reported via email.

Reporting Compromised Systems with Sensitive Data

If you know or suspect that the compromised system contains sensitive data, please take the following steps:

1. Do not investigate or remediate the compromise yourself.
2. Instruct all users to stop work on the system immediately.
3. Do not power down the machine.
4. Remove the system from the network by unplugging the network cable or disconnecting from the wireless.
5. Report the incident by calling EITS Help Desk at 706-542-3106 or emailing abuse@uga.edu. 

If you are unsure what qualifies as sensitive data as defined by University of Georgia Policy, view the Data Classification and Protection Standard.

As a University System of Georgia (USG) institution, UGA follows a USG-prescribed notification process when information security incidents occur.

Please visit the University System of Georgia Incident Management page for more information on USG policy, standards, and guidelines.