We use cookies to ensure that we give you the best experience on our website. You can change your cookie settings at any time. Otherwise, we'll assume you're OK to continue.

Information Security

Report an incident

What is an information security breach?

An information security breach is an unexpected incident that leads to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, University information. It could be caused by loss/theft, insufficient control over access, equipment failure, human error, environmental causes such as fire, a hacking attack or deception.

Examples include:

  • Sensitive personal data being made publicly available on a website
  • Student contact details and financial details being accidentally emailed to inappropriate recipients
  • Loss of an unencrypted memory stick containing University information
  • Paper copies of meeting papers being left unattended in a public place

Why is it important to act quickly?

An information security breach could have many serious consequences, such as causing harm to individuals, damaging the University's competitive advantage and reputation and losing the trust of our students, staff, donors and other stakeholders and could potentially lead to a fine or an order to cease processing personal data from the Information Commissioner.

You must report a breach (or a suspected breach) immediately, whether involving hard copy or electronic information. This applies whether you are on-campus or off-campus, including abroad. In the first instance please notify in person or by telephone:

Graeme Sayer
Information Governance Officer (Security)

Tel: (0191) 33 46106

If unavailable, please notify either of the following staff in person or by telephone:

Sophie Philipson
Information Governance Manager

Tel: (0191) 33 46152

Elaine Richardson
Information Governance Officer
Tel: (0191) 33 46246

Please do not report a breach only by email as the member of staff may be out of the office.