Report incidents and suspicions

What to do

As a staff member at Monash University you should report any cyber security incidents or suspected incidents.

Incidents can include unauthorised system access (hacking), password compromise, malware (viruses etc), phishing and ransomware attacks, denial of service attacks, website defacement and data breaches.

How to do it

Complete the appropriate form on our Report An Incident page.

Use the Report a cyber security/critical infrastructure incident form while logged in to your Monash University account to report the following:
- Your computer or device is locked and/or there is ransomware demanding payment to unlock it
- You suspect you have malware on your Monash computer
- You have clicked on a link in a phishing email and/or provided your credentials to a fake website
- You’ve noticed suspicious activity on your account.
- A third party has informed you that they have had an incident
- An incident with Monash critical infrastructure.
Choose the “Other” option if none of these options fit your issue.
This link will lead you to the Data Protection and Privacy website where you can find more information on Monash’s data protection and privacy policies and procedures, as well as a link to the Report a data privacy or cyber security incident form.

Use this form when the incident involves personal, sensitive or confidential information. For example:
- An email with personal information was sent to the wrong person
- An electronic file was shared without restricted access or with the wrong person
- An incorrect file was uploaded to a platform
- Loss or theft of a physical device, such as a laptop, phone or USB storage device
- Personal information was given to a scammer
- Inadvertent publication of personal information (e.g, inadvertent publication of personal information relating to participants in a study)
- Loss or theft of hard copy records containing personal information
- Another entity that processes personal information has notified you that there has been an actual or suspected data breach.
When you report an incident, you should provide as much information as you can, including:
- What you observed or know of about the incident
- Dates and times
- People and places involved
- Any impact you are aware of.
Any other background information.

If you still aren’t sure which form to use you can email us directly at cyberteam@monash.edu.

For urgent or time sensitive incidents on Australian Campuses and locations, call the Service Desk on 03 9905 1777. See the Service Desk contact page for other contact numbers and email addresses.

Why it matters

When you report an incident or a suspected incident, you help keep the Monash community’s personal data safe from scammers, attackers and cyber criminals.

Time is of the essence – when an incident is quickly identified and controlled it significantly reduces the potential for damage to all staff, students, researchers and other personnel.

Contact the Cyber Team

Email the cyber team at cyberteam@monash.edu

Contact the Service Desk

Contact the Monash University Service Desk.

Cyber Security at Monash University