Incident Reporting at CHA

There is no legal obligation to report attacks. However, CHA's CISO and security team participates and complies with reporting of incidents on an as needed basis and determined by the Information, Security, Privacy and Oversight Team (ISPOT). If I spot determines an incident should be reported the primary vehicle is the FBI, then local and State Authorities.

Federal Authorities

U.S. Federal Bureau of Investigation (FBI) issued an appeal to organizations that have been victims of attacks or crimes share details and characteristics of those incidents with an FBI Field office and the IC3.

Boston, 201 Maple Street, Chelsea, MA 02150 | boston.fbi.gov | (857) 386-2000

Covers the entire states of Maine, Massachusetts, New Hampshire, and Rhode Island

The FBI wants to know about large and small DDoS attacks, and it requests the following incident details from victims:

• Identify the traffic protocol or protocols used in the DDoS attack – such as DNS, NTP, SYN flood;
• Attempt to preserve netflow and attack-related packet capture;
• Describe any extortion attempts or other threats related to the DDoS attack;
• Share all correspondence with attackers “in its original, unforwarded format”;
• Provide information about themselves;
• Estimate the total losses they suffered as a result of the DDoS attack;
• Provide transaction details – if the victim paid a ransom or other payment in response to the attack – including the recipient's email address and cryptocurrency wallet address;
• Describe what specific services and operations the attack impacted;
• List IP addresses used in the DDoS attack.

Massachusetts State Attorney General's Office

The Cyber Crime Division investigates and prosecutes complex criminal cases involving digital evidence, consultation on criminal matters involving technology, and the forensic examination of digital evidence. The Division is focused on building stronger and safer communities, as well as developing shared training resources and collaboration between law enforcement agencies. The Cyber Crime Division also developed and manages a Digital Evidence Laboratory. Opened after new construction in July 2009, the Digital Evidence Laboratory services the Attorney General’s Office as well as other local and state law enforcement agencies seeking assistance. The Laboratory houses a state-of-the-art training facility for law enforcement.

• Cyber Stalking
• How Cyber Stalking Can Happen
• Child Enticement & Exploitation
• Hate Crimes, Racism, & Hate Websites
• Illegal Downloads, Copyright, File Sharing & Piracy
• Illegal Purchases