Forensic services are provided for reported information security incidents. If you are experiencing an incident and you have not reported it, please follow the steps below.

For low severity incidents, such as a compromised account or clicking a link in a phishing email, contact security.response@utoronto.ca.

For information about medium to critical severity incidents, refer to the Incident Response Plan. If you are experiencing a medium to critical severity incident, complete the incident intake form.