Note:

See the If/then Guide for Reporting Incidents and Data Breaches (PDF) to check for additional reporting requirements based on what was lost, stolen, destroyed, or disclosed.

The Computer Security Incident Response Center (CSIRC). Report the incident/data breach to CSIRC using the Computer Security Incident Reporting Form, or by calling CSIRC at 240-613-3606, if the incident/data breach involves: the loss or mishandling of IRS information technology resources; or the loss or theft of an IRS IT asset, e.g., an IRS issued computer, laptop, router, printer, cell phone, or removable storage media (CD/DVD, flash drive, floppy, etc.); or the loss or theft of a non-government furnished/personally owned mobile device that accesses, processes, transmits, or stores IRS information, in support of the Bring Your Own Device (BYOD) program; or an IRS IT asset or BYOD asset lost or stolen during UPS or FedEx shipment.