AV天堂

Skip to main content
People Departments Maps Buildings Rooms A-Z
University
of Victoria
Apply Library
Sign in Online tools Sign out
Information security

Report an incident

If you need to report something and aren't sure if it's a privacy or information security incident, use either one. The infosec and privacy offices often work together. Just try to describe what's happened as well as you can and we'll make sure your report gets to the right people.

To report an emergency or assault, call 9-1-1 first, then contact Campus Security at 250-721-7599.

Find other emergency contacts and resources.

Security and privacy incidents

Lost or stolen device

If your UVic-owned device (computer, phone, tablet or external storage device) has been lost or stolen:

Report all thefts to the local police department for the area it occurred (, ,  and so on).

Information security incident

Information security incident: any event that threatens the confidentiality, integrity or availability of information systems and sensitive information (but doesn't constitute a privacy breach or incident).

Report information security incidents to IT support.

Report incident

Privacy breach/incident

Privacy breach or incident: any incident in which personal information has been (or could have been) exposed to unauthorized parties. For example:

  • Unauthorized access to confidential UVic files.
  • Sending personal information to the wrong person by mistake.
  • Finding confidential UVic data stored insecurely or publicly on a webpage.

Report privacy breaches or incidents to your supervisor and the Privacy and Access to Information Office.

Email Privacy and Access Office

I found a vulnerability

If you're aware of a vulnerability in a UVic system, please let us know.

Report a vulnerability

Phishing and suspicious email

If your UVic email address is receiving suspicious or scam emails, report them using the Report feature in Outlook. Learn how to report phishing on  or .

If you're not sure if a message is legitimate, don't follow any links or respond to it. Contact the person or office that supposedly sent it using a different method (like phone or Teams chat) and ask if it's real.

If you did follow a suspicious link or send any personal information, change your NetLink ID passphrase immediately.

Other incidents

You don't necessarily need to report the following incidents, but please do reach out to your supervisor or IT support (or any of the other listed contacts) if you're concerned, if you think you're at risk or if you're being personally targeted.

If you receive a Duo push notification when you aren’t trying to sign in to a UVic service, someone might be trying to access your account. 

Deny the push notification. When Duo asks, “Was this a suspicious login?”, select Yes. This will stop the other person’s sign in attempt.

You should change your NetLink ID passphrase immediately.

Online harassment can be upsetting and stressful. There are support resources available for UVic students and employees.