When to report
A cyber incident can disrupt digital information systems by:
- Breaching data security
- Making services unavailable
Cyber incidents should be reported in instances when there is:
- A significant loss of data, service, system control
- A large number of victims
- Malicious software installed on or unauthorized access on a critical system
- An effect on critical infrastructure or government functions
- An impact on national or economic security
- An impact on public health or safety
What to report
Incidents can be reported even when information may be incomplete, including:
- Who you are
- Who experienced the incident
- What occurred
- How the incident was detected
- What steps were taken
- Who was notified
Where to report cybercrime incidents
Federal agencies fill various roles in receiving and responding to cybercrime and coordinate responses. Report your issue to any of the agencies below.
Federal Bureau of Investigation (FBI)
Report to the FBI Field Office Cyber Task Forces instances of:
- computer intrusions or attacks
- fraud or identity theft
- intellectual property theft or theft of trade secrets
- criminal hacking
- terrorist activity
- espionage, sabotage, or other foreign intelligence activity
Report individual crimes to the Internet Crime Complaint Center (IC3). IC3 accepts cybercrime complaints from victims and third parties.
Report major cybercrimes and intrusions to the National Cyber Investigative Joint Task Force or the CyWatch 24/7 Command Center at 855-292-3937.
United States Secret Service
Report intrusions, password trafficking, and theft of payments to the Secret Service Field Offices and Electronic Crimes Task Forces.
United States Immigration and Customs Enforcement / Homeland Security Investigations (ICE/HSI)
ICE/HSI investigates digital intellectual property theft, smuggling, money laundering, internet-related arms dealing, and online child pornography. Contact the HSI Tipline, an HSI field office, or the HSI Cyber Crimes Center.
Cybersecurity and Infrastructure Security Agency (CISA)
CISA assists with removing threats and restoring operations and can recommend ways to improve security. Contact CISA by email, phone 888-282-0870, or report an incident online.