Report an incident

Report an incident

Reporting privacy or information security incidents

What qualifies as a "privacy or information security incident"?

A privacy incident occurs when personal information is accessed, collected, used, disclosed or disposed of without proper authorization.

An information security incident is the suspected or actual unauthorized access, use, disclosure, modification, or destruction of UBC electronic information or interference with information technology operations.

Some common examples of privacy or information security incidents that should be reported include:

You suspect there is malware or a virus on your device

You have sent personal information to the wrong person by mistake

You received or responded to a phishing email
(What is a phishing email?)

A mobile device you use to access UBC services (e.g. FASmail) was lost or stolen

Somebody broke into your office and may have seen or stolen confidential files

You think a UBC website you manage or use has been hacked

1What should I do?

If a device you use to access UBC services (e.g. FASmail) was lost or stolen:

  • On Campus: Contact local Law Enforcement, send an email to and call UBC Campus Security @ 604.822.2222
  • Off Campus: Contact local Law Enforcement and send an email to

For all other privacy or information security incidents during business hours:

For immediate 24 hour security response:

  • call 604.822.6141 and request a "cybersecurity callout"

Depending on the severity of the situation, you will also need to inform:

  • Your supervisor - for all incidents, except for phishing attempts.
  • Departmental IT support - for all incidents involving electronic information and/or systems they support (e.g. lost devices, malware, hacked websites).
  • Campus security - for all incidents that involve the physical security of the UBC campus (e.g. you suspect a crime has occurred). Call 604.822.2222 (Vancouver) or 250.807.9236 (Okanagan).

2What if I receive a suspicious email?

If you receive a phishing email (learn more about phishing email), a suspicious attachment, or harassing emails, please report the email to, and include the email as an attachment.

In the case of virus-infected emails, please provide the name of the virus as identified by your anti-virus software. Threatening or harassing emails should also be reported to your manager, supervisor or local HR representative.

3What if my computer is acting strangely?

If your computer is acting strangely, contact your local IT support to help identify the issue.

If it does not appear to be a technical issue and persists, you can either send an email to describing the issue, contact your local IT support, or visit the UBC Vancouver IT Help Desk at the Koerner Library (1958 Main Mall) or the UBC Okanagan IT Help Desk at ADM024B (basement of the Administration building).

Go even further...

For a much more in-depth look at privacy or information security incidents at UBC, you can:

Complete the full Fundamentals training to learn how to protect yourself and others
Scan the UBC IT Enterprise Services Status Page for security alerts
Visit the Access and Privacy website
Learn more about physical security at UBC Vancouver
Learn more about physical security at UBC Okanagan