Main Content

What to do in IT security incidents

Did some of the following happen to you?

Icon - A computer and a cell phone with a yellow warning triangle.
image: SIS

Malware on your device - Have you opened an attachment from an email or did you click on a link and realized that your pc, laptop or smartphone is doing strange things?


Icon - Two input fields for the user name and the corresponding password.
image: SIS

Theft of your account data (Phishing) - Have you entered your username and password on a fake website that you accessed via a
link in an e-mail, for example?

Icon - Two USB sticks.
image: SIS
Loss of storage media - Have you lost a USB stick, for example, on which confidential data such as passwords, exams, applications,
grades, payslips or research results are stored?




Icon - A person steals a cell phone.
image: SIS

Loss of devices - Have you lost a device (e.g. your PC, laptop or smartphone) that you use for your work at the university?




Icon - You can see a router and a radio antenna with a yellow warning triangle.
image: SIS

Discovering unknown devices - Have you noticed, for example, a WLAN router, a USB stick or other PCs/laptops in your own rooms that are suddenly there and were not announced?

Then please observe the following measures:

Behavioral instructions:

  • Change your account password immediately if you have logged in to a fake website!
  • Stop any further work on the IT system (afterwards).
  • Disconnect the affected device from the network (Internet), but do not switch off the device!
  • Only act in accordance with further instructions from the IT administration!
  • Document your observations.
  • Keep calm and contact the IT administration!

Be prepared for the following questions:

  • Who is reporting?
  • Which IT system is affected?
  • How did you work with the IT system?
  • What did you observe?
  • When did the event occur?
  • Where is the affected IT system located? (Building, room, workstation)
  • Do you have administrative rights to the affected IT system?

If you respond quickly, we can work together to protect our data and IT infrastructure. Your help protects you and us from major damage and has no consequences for you.

Secure evidence and inform the IT administration!

Keep calm & report an IT incident.
Please contact your IT administration and/or:

Phone: 06421 28-28281
E-mail:

Download the flyer in different formats:

If you need the flyers in another format, please write us an e-mail.