Notify InfoSec at infosec@hawaii.edu or 808-956-2400 if any of the following may have occurred:

• A UH web server is defaced.
• A UH server appears to be compromised.
• Sensitive information (e.g. student records, Social Security numbers, etc.) may be lost, stolen, exposed, or accessed by unauthorized personnel.
• A computer, laptop, mobile device, portable storage, etc possibly containing sensitive information is lost or stolen.
• Paper documents containing sensitive information is lost, stolen, exposed, or accessed by unauthorized personnel.
• Any suspicious activity related to UH resources (e.g. network, servers, copiers, paper recycle bins, etc.).

If you think your device is compromised…

1. Isolate the Device — Disconnect the device from the network (unplug network cable, turn off Wi-Fi)
2. Leave the device alone — Do not power the device off, or run antivirus or other tools
3. Determine the Risk — Determine if UH Regulated or UH Sensitive data was stored on the device itself or connected to a device with UH Regulated or UH Sensitive data
4. Report — Contact the UH Information Security team immediately for further instructions
5. Determine the Scope — If possible, determine if other devices are also affected

I want to…

Report	E-Mail
Report a UH related phishing email	phishing@hawaii.edu
Report a virus infection Report a compromised UH email account — See also If you suspect that your account has been compromised…	help@hawaii.edu
Report a suspicious information security event Ask a question about information security	infosec@hawaii.edu

Data Breach Notification Template

If a breach involving UH Regulated data is confirmed, affected individuals will need to be notified. Hawaiʻi State law requires that the breach notification letter contain specific, required elements as described in this Data Breach Notification Letter Template .