Reporting Concerns to Penn Office of Information Security

Penn Office of Information Security is available to respond to computing security incidents and can be reached at:

Note: After hours support is provided by an on-call security analyst who will respond using their personal mobile phone. 

IMPORTANT! If you believe that the issue you wish to report involves a possible threat to the personal safety of yourself or any other person, or if you believe that it involves criminal activity (including identity theft), we strongly urge you to report it directly to Penn Public Safety by calling them at 511 (on-campus) or 215-573-3333 (off-campus/cell phone). Although Penn Office of Information Security is not a law enforcement agency, we will consult with Public Safety on criminal investigations involving computing security.

If you're unsure about what you should report, or how you should report it, here are a few suggestions:

  • If you are reporting an attack against a computer belonging to you, and the attack appears to be coming from or involve a computer that is part of Penn's network, it is very helpful if you can forward any logs you have that detail the attack to us at security@isc.upenn.edu to assist in the investigation.
  • If you are a Penn computer user, and you have reason to believe that one or more of your computers has been compromised, then report it to us along with any logs or other evidence you have detailing the compromise. It's also a good idea to unplug the affected machine(s) from the network until the matter is resolved.
  • If you are reporting what you believe is a violation of copyright law involving a computer that is part of Penn's network, please check the information on Copyright and File Sharing webpage before making your report.
  • If you are contacting us about a forgotten PennKey password, lost or expired Setup Codes, or anything related to your PennKey, please note: University policy and security guidelines do not permit Setup Codes to be issued by telephone or email, nor can anyone in Information Security set or reset your PennKey password. You will need to visit one of the PennKey Administration Offices to be issued a PIN, or request one be (postal) mailed to you using the automated system. For more general information on PennKey, please visit http://www.upenn.edu/computing/pennkey/setreset or write to pennkey@isc.upenn.edu.
  • If you have received an email that seems to involve a scheme offering you millions of dollars to help launder "trapped" funds, please read information on Phishing and Spear Phishing before you contact us. 

The above does not cover all situations, therefore, if you suspect a computing security issue it is better to contact the Office of Information Security to mitigate any risk.