Types of cyber security incidents that need to be mandatorily reported to CERT-In

• Targeted scanning and/or probing of critical systems/networks
• Critical data or system compromise
• Unauthorised access to IT systems/data
• Attack on website or malware intrusion through malicious code, infected links etc.
• Attack on servers such as Mail, Database and DNS and network devices such as Routers
• Identity Theft, web jacking, spoofing and phishing attacks
• Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks
• Attacks on Critical Infrastructure, SCADA and operational technology systems and Wireless networks
• Attacks on Applications such as E-Governance, E-Commerce etc.
• Data Breach and Data Leak
• Attacks on Internet of Things (IoT) devices and associated systems, networks, software and servers
• Attacks or incidents affecting Digital Payment systems/gateways
• Unauthorised access and hacking of social media accounts
• Attacks or malicious/unusual activities affecting Cloud systems, servers, software and applications
• Attacks or malicious/abnormal activities affecting servers, systems, networks, applications, and software related to Blockchain, Big Data, virtual assets, virtual asset exchanges, Robotics, 3D and 4D Printing, custodian wallets, Drones, additive manufacturing, etc.
• Malicious/suspicious activities or attacks affecting servers, systems, software and applications related to Artificial Intelligence (AI) and Machine Learning (ML).