Report an Incident
Contact CIRCL, via:
Recommendations:
- CIRCL should be contacted as soon as an incident has been detected
- When reporting, please be specific about time and time-zone
- Share your contact details, including phone numbers or PGP keys if available.
Once reported the incident:
- Every action you perform should be noted and should aim to preserve evidence
- Instead of turning off a system, unplug the computer from the network
- Software, applications, files, data or logs should not be installed, reinstalled, copied, moved or
deleted from the impacted system/services
- No actions other than those dedicated to containing the incident should be performed