How should a suspected or confirmed privacy disclosure incident be reported?

Suspected or confirmed privacy disclosure incidents should be reported to the CBP Security Operations Center via email at CSIRC@cbp.dhs.gov or telephone at (703) 921-6507.  In the case of a privacy incident involving medical information, a statement should be provided regarding the nature (e.g., electronic, paper, verbal) of the suspected disclosure, what was disclosed, by whom, to whom, and any other facts regarding the disclosure.