This page has been created to help understand what circumstances an Incident Reporting Form needs to be filled out and reported. This includes, but is not limited to, the following:

• Unauthorized disclosure of sensitive information
• Theft or loss of equipment that contains private or potentially sensitive information
• Extensive virus or malware outbreak and/or traffic
• Attempts (either failed or successful) to gain unauthorized access to a system or it's data
• Compromised user account
• Responding to a phishing email or having any other Murray State University account compromised (ex. Active Directory, MyGate, etc.)
• Extensive disruption of Murray State University's information services