Report Cybersecurity or Privacy Issues - Ann Arbor City IT

Technology and Data Michigan 3 Minutes Read · published March 01, 2026 Flag of Michigan

Introduction

In Ann Arbor, Michigan, city employees, residents, contractors, and third parties should report cybersecurity incidents or suspected privacy breaches involving City of Ann Arbor systems and data promptly. This guide explains who to contact, what information to provide, expected next steps, and how the City typically handles reports so you can act quickly and securely.

Report incidents promptly to preserve evidence and reduce harm.

Who to Notify

Notify the City of Ann Arbor Information Technology Department for non-criminal security incidents and the Ann Arbor Police Department if you believe a crime has occurred. For general service-related reports, use the City’s Report a Problem portal for tracking and acknowledgement.

Information Technology Department[1] | Report a Problem[2] | Ann Arbor Police Department[3]

What to Include in a Report

  • Date and time of discovery and any observed activity.
  • Systems, applications, or data types affected (names, URLs, identifiers).
  • Steps already taken (disconnections, password changes, screenshots, logs).
  • Your contact information and preferred method for secure follow-up.

Penalties & Enforcement

The City’s public-facing IT pages describe reporting routes and incident handling but do not publish specific monetary fines or administrative penalty schedules for cybersecurity or privacy incidents on those pages; enforcement details are not specified on the cited page.[1]

  • Monetary fines: not specified on the cited page.[1]
  • Escalation: first, repeat, and continuing-offence ranges are not specified on the cited page.
  • Non-monetary sanctions: may include administrative orders, account suspension, access revocation, and referral for criminal prosecution where applicable; specific procedures are not specified on the cited page.[1]
  • Enforcer: Information Technology Department for operational response and Ann Arbor Police Department for suspected criminal activity; contact links above.[1]
  • Appeals/review: formal appeal routes and time limits are not specified on the cited page; inquire with the department contact for review procedures.[1]
Criminal allegations are handled by law enforcement while IT handles containment and remediation.

Applications & Forms

No dedicated public form for reporting cybersecurity incidents is published on the City IT page; the City uses its general reporting portal and direct department contacts for incident intake. If a formal breach notification form exists it is not specified on the cited page.[2]

Action Steps: How the City Typically Responds

  • Initial triage and containment by City IT or delegated vendor.
  • Preservation of logs and evidence for internal review or law enforcement.
  • Notification to affected parties if required under law or policy; timing and method depend on the incident.
  • Recovery actions such as password resets, system rebuilds, and monitoring.
Keep a secure copy of any evidence you provide and avoid altering the original source data.

FAQ

Who should I contact first for a suspected data breach?
Contact the City of Ann Arbor Information Technology Department and, if you suspect criminal activity, the Ann Arbor Police Department. Use the Report a Problem portal for non-urgent tracking.
Will I get confirmation after I report?
The City’s reporting channels typically acknowledge receipt; response times vary by severity and workload.
Are there penalties for exposing city data?
Specific monetary penalties or administrative fines for cybersecurity/privacy incidents are not published on the City’s public IT pages; enforcement may include account suspension or referral to law enforcement.

How-To

  1. Gather details: note dates, affected systems, and any error messages or indicators.
  2. Preserve evidence: take screenshots and export logs where possible without altering originals.
  3. Report via the Information Technology Department contact or the Report a Problem portal and include your contact details for follow-up.
  4. If criminal activity is suspected, contact the Ann Arbor Police Department and indicate that you have reported the incident to City IT.
Reporting through official City channels ensures records are created for investigation and potential legal action.

Key Takeaways

  • Report quickly to preserve evidence and limit harm.
  • Use the City IT contact for technical response and police for suspected crimes.
  • Formal penalties and appeal timelines are not published on the referenced City pages; ask the department for details.

Help and Support / Resources


  1. [1] City of Ann Arbor Information Technology Department
  2. [2] City of Ann Arbor Report a Problem
  3. [3] City of Ann Arbor Police Department