Report a Security Incident

There are two main ways you can report a security incident to the Information Security team: 

  1. Submit a ticket on TDNext using the "Report a Security Incident" button on the right
  2. Send an email to Information.Security@dartmouth.edu

TDNext will prompt you to submit the necessary information. If submitting a ticket via email, make sure the following is included:

Type of Incident
Incident Timeline
Who reported the incident?
Detailed description of the event


Type of Incident

Note all types that apply:

  1. System Compromise
  2. Credential Compromise
  3. Network Attacks (DOS, Scanning, Sniffing)
  4. Malicious Software (Viruses, Worms, Trojans)
  5. Equipment Theft or Loss
  6. Unauthorized Physical Entry
  7. Social Engineering Attacks (Phishing)
  8. Policy Violations
  9. Third-Party Security Incident (Cloud Service or Partner Network Breach)

Incident Timeline

  • Dates/times (including time zones) for the incident occurrence (if known), discovery, initial report, and closure.

Who reported?

  • Contact Information for the Incident Reporter:
    • Full name and NetID
    • Phone number
    • Email address
    • Organizational unit/department
  • If an automated system reported the event:
    • Name of software package
    • Name of the host where the software is installed
    • Network address
    • Physical location
  • If a third party reported the event:
    • Through email - Include full email notice
    • Via phone call - Name, organization, phone number and email address of caller

Detailed description of the event

Include as much information as possible:

  • Description of the incident (how it was detected, what occurred)
  • Description of the affected resources
  • Description of the affected organizations
  • Estimated technical impact of the incident (i.e. data deleted, system crashed, application unavailable)
  • Summary of response actions performed so far
  • Other organizations contacted