Cyberattacks have the potential to do devastating damage to your business, your finances, and your reputation with your community. Any cybersecurity incident, no matter how insignificant, should be documented and shared with the appropriate individuals inside and outside your organization.

Severe incidents can involve theft of money or identities, distribution or possession of contraband, and cyber extortion, to name a few. In these cases, it is recommended to contact the authorities immediately.

Keep a list of identities and contact information in your office facilities. These identities should include verified law enforcement and cybercrime helplines. It is essential to note the context of each contact to determine whether it applies to a specific cyber incident.

Some examples include:

Company IT Department (If applicable)

Managed Security Services Provider (If applicable)

Local Police Department

Emergency services

Phone: 911

Internet Crime Complaint Center (IC3)

Phone: (202) 324-3000

Web:  https://www.ic3.gov/one

Federal Trade Commission (FTC) for Fraud and Identity Theft

Phone: 1-877-IDTHEFT (1-877-438-4338)

Web: www.ftc.gov/complaint

Cyber Civil Rights Initiative (Online Abuse, Revenge Porn Reports)

Phone: 844-878-2274

Web: https://cybercivilrights.org/

NCMEC Cyber Tipline (CSAM Material)

Phone: 1-800-843-5678

Web: https://www.missingkids.org/gethelpnow/cybertipline

Any emergency contact info should be shared with all employees. It is essential to educate your workplace about which incidents require which authorities.