If you become aware of an event that could result in a breach of personally identifiable information (PII), it is critical that you immediately report any information or network security incident to isg@brown.edu using the following recommended actions.

Lost or Stolen Electronic Media or Computing Device

• File a report with law enforcement: Contact the Department of Public Safety (401-863-3103) if the loss occurred on campus, or to local police, to report lost or stolen electronic media or a computing device, whether it is Brown-issued or personally-owned.
• Wipe devices: If it's possible, you should remotely wipe your device to prevent any contents from being accessed by another.
  • Brown-owned laptops and tablets: Contact your ITSC of DCC (Departmental Computing Coordinator) for assistance.
  • Brown-owned phones: Notify the Telecommunications Office immediately (telecom@brown.edu, 401-863-2007). Telecom will suspend voice services and issue a remote wipe of the device, if applicable. 
  • Personally-owned laptops, tablets and phones: If you had installed software with wipe functionality, activate it. For phones, you should also notify your service provider to suspend your service.
• Track the device: If you had third-party tracking software installed, contact the company, or for software such as Lookout or Webroot, activate its tracking function.
• High risk information: If the lost or stolen device was used to store information with Level 2 or 3 risk, please notify the Information Security Group at isg@brown.edu immediately, and complete the Missing, Lost or Stolen Device online form . ISG will work with you to determine the next steps, and whether the event requires notification.

Device/Information Intrusion

• If you suspect that someone has broken into your device, please disconnect it from the network and notify isg@brown.edu as soon as possible.
• If an account may have been compromised, change your password in myaccount.brown.
• Next, report the incident to ISG, providing details that include: when and where it occurred,  details about the affected device (such as OS, type, owner),  and/or any accounts that may have been impacted. They will investigate the incident and help you recover your system.

Protected Health Information (PHI)

If any PHI might have been lost, stolen, compromised, misdirected, etc., please notify isg@brown.edu, who will work with you to determine the next steps, and whether the event requires notification.