iRES Portal | Report a Cyber Incident

iRES portal

Tell us what is happening and an iRES incident handler will call you. For critical incidents that are stopping operations, call the hotline first.

While you wait

01
Do not power off affected systems
Isolate them from the network instead. Powering off can destroy valuable evidence held in memory.
02
Disconnect, do not delete
Remove network cables or disable Wi-Fi on affected devices. Do not delete files or reinstall software.
03
Preserve evidence
Keep logs, ransom notes, suspicious emails and screenshots. Note the time you noticed each event.
04
Use a separate channel
Assume email and chat may be compromised. Coordinate by phone or a trusted out-of-band channel.
05
Do not pay or engage
Do not contact attackers or pay any ransom before speaking with incident responders.
06
Call iRES
Report the incident as early as possible. Early response reduces impact and recovery time.

Existing iRES clients

Report a cyber incident