Threat to life or property? Call 911.

For non-life-threatening emergencies, call Campus Safety:

St. George: 416-978-2222 | Mississauga: 905-569-4333 | Scarborough: 416-978-2222

Report a cyber security incident

If you have experienced any of the following, do not panic. Contact your local IT help desk right away. If personal information is involved, also notify the University Privacy Office at privacy@utoronto.ca.

What counts as personal information?

Personal information is any information about an identifiable individual, including details that can reasonably identify someone on their own or when combined with other information.

Examples of incidents:

  • Clicking a suspicious link.
  • Opening a suspicious attachment.
  • Suspecting your device is infected with malware.
  • Sending sensitive information to the wrong person or otherwise sharing personal information with someone not authorized to receive it.
  • Losing a device.

Report a phishing email

Received a suspicious email? Here’s what to do:

1. Report it

Select the U of T Report Phishing button in Outlook, or forward the email to report.phishing@utoronto.ca.

2. Delete the message

After reporting, delete the email from your inbox.

3. Clicked a link or opened an attachment?

If you clicked a link or opened an attachment, see Report a security incident.

Report a scam

Have you been targeted by a scam? Here’s what to do:

Report an incident to the institutional incident response team

If you’re part of a unit’s incident response team and need to report a security incident, follow these steps:

  • Submit the incident intake form
    Complete and submit the incident intake form and include any details you know. It’s okay if the information is incomplete – share what you can.

  • Inform the University Privacy Office 
    If personal information is involved, notify the University Privacy Office at privacy@utoronto.ca.

  • Next steps
    A member of the institutional incident response team will contact you shortly to gather details and guide you through the process.

Incident support resources

Incident Response Plan

If you suspect a major cyber security incident, follow the university’s Incident Response Plan to ensure appropriate steps are taken and you have the resources needed to respond effectively.

Fraud prevention

Fraud can be a sign of a broader cyber security incident. If fraud involves compromised accounts, devices or personal information, report it as a security incident.

For information about common types of fraud and how to protect yourself, visit the Community Safety Office’s fraud prevention pages.

Shield with a question mark

Have questions about cyber security incident response?

Contact the Information Security Response team at security.response@utoronto.ca.

Question

Have a non-urgent IT question? Contact your local IT help desk:

St. George:

help.desk@utoronto.ca

Mississauga:

helpdesk.utm@utoronto.ca

Scarborough:

helpdesk.utsc@utoronto.ca