Cyber crime includes identity theft, cyber attacks (such as ransomware, malware, denial of service, etc.), fraud, and violating privacy. Whether you are an organization experiencing a cyber attack or an individual who is a victim of identity theft, follow the below steps to report the cyber crime and begin recovering.

• If You’re an Organization
  • Step 1: Contact Law Enforcement

    Law enforcement performs an essential role in achieving the nation’s and state’s cybersecurity objectives by investigating, apprehending, and prosecuting those responsible for a wide range of cyber crimes.

    If you are a victim of a cyber crime, contact a law enforcement agency right away.

    Agencies include:

    • FBI - Internet Crime Complaint Center (IC3)
      The FBI Internet Crime Complaint Center (IC3) mission is to receive, develop, and refer criminal complaints regarding the rapidly expanding arena of cyber crime. The IC3 gives the victims of cyber crime a convenient and easy-to-use reporting mechanism that alerts authorities of suspected criminal or civil violations.
    • Indiana State Police (ISP)
      ISP’s Cybercrime & Investigative Technologies Section has detectives who specialize in conducting cyber crime investigations. If there is an immediate threat to public health or safety, the public should always call 911.
  • Step 2: Additional Reporting
    • Indiana Attorney General
      Indiana’s security breach notification statute requires organizations to provide Indiana residents with the right to know when a security breach has resulted in the exposure of their personal information. For more information and to report a security breach, click here.
    • Regulators
      If you are an organization that is regulated, you may be required to report cyber crimes to other state or federal agencies.
    • Federal Government
      This fact sheet, Cyber Incident Reporting: A Unified Message for Reporting to the Federal Government, further explains when, what, and how to report a cyber crime to a number of federal agencies.
  • Step 3: Know Your Resources
    • MS-ISAC Security Primer on Ransomware
    • CISA Tip Sheet on Ransomware
    • NGA Disruption Response Planning Memo
    • NASCIO Cyber Disruption Planning Guide
    • National Cybersecurity and Communications Integration Center (NCCIC)
      Department of Homeland Security’s NCCIC is a 24/7 cyber situational awareness, incident response, and management center that is a national nexus of cyber and communications integration for the federal government, intelligence community, and law enforcement.
    • United States Computer Emergency Readiness Team (US-CERT)
      US-CERT provides secure means for the public to report incidents, phishing attempts, malware, and vulnerabilities as well as a variety of resources in how to handle certain cyber crimes.
    • Industrial Control Systems Cyber Emergency Response Team (ICS-CERT)
      ICS-CERT works to reduce risks within and across all critical infrastructure sectors by partnering with law enforcement agencies and the intelligence community and coordinating efforts among federal, state, local, and tribal governments and control systems owners, operators, and vendors.
    • National Institute of Standards and Technology (NIST)
      NIST’s Computer Security Incident Handling Guide assists organizations in establishing computer security incident response capabilities and handling incidents efficiently and effectively.
    • Ready.gov
      Ready.gov is a national public service campaign designed to educate and empower the American people to prepare for, respond to, and mitigate emergencies, including cybersecurity.
  • Step 4: Information Sharing

    If you are a victim of a cyber crime, it is important to share such information with other organizations in order to protect critical infrastructure, the state of Indiana, and our nation. Learn more about Cyber sharing.

• If You’re a Victim of Identity Theft
  • Step 1: Take Immediate Actions
    • Contact the companies where you know the fraud occurred.
    • Report to the Federal Trade Commission.
    • Place a fraud alert by contacting one of three credit bureaus (Experian, TransUnion, and Equifax) and get your credit reports.
    • Request a credit freeze free of charge for residents, register for a toolkit, or file a complaint with Indiana Attorney General’s Identity Theft Prevention Program.
    • Contact your local law enforcement agency to file an official police report.
    • Contact the Internal Revenue Service (IRS).
  • Step 2: Know Your Resources
    • Indiana Department of Revenue - Stop ID Theft
    • Internal Revenue Service (IRS) – Identity Protection
    • Indiana State Police (ISP) – Report an Internet Crime
    • Department of Homeland Security – Stop. Think. Connect. Campaign
    • Social Security Administration – Fraud, Waste, and Abuse
    • Indiana Department of Insurance
    • Indiana Department of Financial Institutions
    • Privacy Rights Clearinghouse