Annexure I Types of cyber security incidents mandatorily to be reported by service providers, intermediaries, data centres, body corporate and Government organisations to CERT-In: [Refer Rule 12(1)(a) of The Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013] i. ii. iii. iv. v. vi. vii. viii. ix. x. xi. xii. xiii. xiv. xv. xvi. xvii. xviii. xix. Targeted scanning/probing of critical networks/systems Compromise of critical systems/information Unauthorised access of IT systems/data Defacement of website or intrusion into a website and unauthorised changes such as inserting malicious code, links to external websites etc. Malicious code attacks such as spreading of virus/worm/Trojan/Bots/ Spyware/Ransomware/Cryptominers Attack on servers such as Database, Mail and DNS and network devices such as Routers Identity Theft, spoofing and phishing attacks Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks Attacks on Critical infrastructure, SCADA and operational technology systems and Wireless networks Attacks on Application such as E-Governance, E-Commerce etc. Data Breach Data Leak Attacks on Internet of Things (IoT) devices and associated systems, networks, software, servers Attacks or incident affecting Digital Payment systems Attacks through Malicious mobile Apps Fake mobile Apps Unauthorised access to social media accounts Attacks or malicious/ suspicious activities affecting Cloud computing systems/servers/software/applications Attacks or malicious/suspicious activities affecting systems/ servers/ networks/ software/ applications related to Big Data, Block chain, virtual assets, virtual asset exchanges, custodian wallets, Robotics, 3D and 4D Printing, additive manufacturing, Drones Page 5 of 8