Reporting a Security Incident

[Jun 28, 2008 8:06] Email phishing scam targeting WebMail users has been reported. More Information

Where you report your security incident depends on the nature of your University affiliation.
Medical Center Employees
Call the Computing Services Help Desk at (434) 924-5334 to report incidents to the Medical Center's Information Security Office. Additional information is provided in the Medical Center's Incident Management Guideline.
Health Services Foundation Employees
Report incidents to the HSF HIPAA Security Desk at (434) 970-2484 or (434) 924-5334.
UVa's College at Wise (and Related Foundations) Students and Employees
Report incidents to the Security and Policy Coordinator by emailing abuse@uvawise.edu or calling (276) 376-4641. If the incident involves equipment theft, the person reporting the incident should also immediately contact the UVa-Wise Police Department at (276) 328-2677. The Information Technology Security and Policy Coordinator will inform all other appropriate University officials.
UVa Students

If the incident involves student activity or student-owned equipment, then:

If the incident involves activity in a student-employee capacity, see the University Academic Division and Other Foundation Employees procedure below.

University Academic Division and Other Foundation Employees

If your problem has any of the following characteristics:

  • Potential unauthorized disclosure or alteration of University data not routinely made available to the general public, e.g., employee evaluations, or data the University is legally or contractually bound to protect—e.g., Social Security numbers, credit card numbers, certain research data
  • Loss or theft of electronic devices or media which store University data not routinely made available to the general public or data the University is legally or contractually bound to protect
  • Contact from the FBI, Secret Service or other law enforcement organizations regarding a University electronic device that may have been used to commit a computer crime

…then…

If the problem does not have any of the above characteristics, then:

© 2008 by the Rector and Visitors of the University of Virginia.

The information contained on the University of Virginia’s Department of Information Technology and Communication (ITC) website is provided as a public service with the understanding that ITC makes no representations or warranties, either expressed or implied, concerning the accuracy, completeness, reliability or suitability of the information, including warrantees of title, non-infringement of copyright or patent rights of others. These pages are expected to represent the University of Virginia community and the State of Virginia in a professional manner in accordance with the University of Virginia’s Computing Policies.