Cyber attack reporting guidance

Live Cyber attack

  1. If the cyber attack is live and happening now call Action Fraud on 0300 123 2040.  Action Fraud will triage the incident and alert other agencies as required.
    • To help  Action Fraud understand the potential scale, severity and impact of the incident please provide answers to the following points:
      1. Who are you?
      2. What organisation are you reporting an incident for?
      3. What is your role in this organisation?
      4. What are your contact details?
      5. A summary of your understanding of the incident, including any impact to services and/or users
      6. What investigations and/or mitigations have you or a third party performed or plan to perform.
      7. Please provide the output of any technical analysis.
      8. Who else has been informed about this incident?
      9. What are your planned next steps?
  2. If the cyber attack is potentially life-threatening (e.g. related to health systems) call 999;
  3. Notify other North East Public Sector organisations (ISNorthEast members) by email:
  4. If you have access, check the CiSP to see if others have reported the same issues and to see if any mitigation or other advice has been posted. You can sign up to the CiSP here.
  5. Alert any networks you’re connected to, e.g. JANET, PSN, PNN, HSCN / N3 (CareCERT etc.) and also your colleagues and contacts in organisations you work with.
  6. Critical incidents should be reported to the National Cyber Security Centre Incident Management Team ( / 0300 0200 973).

Historic or attempted cyber attack, phishing attempt or invoice fraud

  1. Contact Action Fraud (  In order to guarantee a response / detailed assessment of your crime, need to give as much detail / information as possible to Action Fraud (see checklist above).  Action Fraud response times are generally 28 days.
  2. If you’re an ISnortheast member and it’s likely to have impacted other North East Public Sector organisations then notify them by email:


See also Action Fraud’s advice leaflet