In the unfortunate event that a York-owned laptop or other electronic portable devices (i.e. smart phones, tablets, USB drives, etc.) being lost or stolen, it is essential that the incident be reported as soon as possible.
If the device has been lost, contact the lost and found offices at all locations visited prior to the loss, and notify the groups listed in sections a, b, and c below.
If the device has been stolen, report it to your local law enforcement agency and contact:
a) York Security Services: 416-736-5333 or safety@yorku.ca
b) University Services Centre (USC) at askit@yorku.ca
c) York University Lost and Found: https://www.yorku.ca/safety/lostandfound/
Information Required for Loss/Theft Reporting
When reporting the incident, provide a concise description of how the device was lost or stolen, along with the following details:
- Department (i.e. UIT)
- Contact Information: Full Name and Passport York ID
- Device Information: Manufacturer, model, device name (phone/host/laptop), and phone number
- Types of Data Stored on the Device: (i.e., student or staff data, health information, credit card data)
- Timeline of Events: When the device was first noticed missing, and where it was or may have been prior to the loss
- Device Security Status: Whether the device could be remotely tracked, locked, and/or wiped (i.e. Find My Phone, Find My iOS)
Additional Guidance & Best Practices
- Change your Passport York password immediately.
- Terminate any active sessions associated with the lost or stolen device across applications, websites, two‑factor authentication tools, and email accounts. If a service does not support selective session termination, updating the account password will generally achieve the same result.
- If the device contained saved credit card information, e‑commerce accounts, cryptocurrency wallets, or online banking credentials, monitor all associated accounts for any signs of unauthorized activity.
- If the device is recovered, consider having it re‑imaged (restored to a default or known‑good state) to ensure it has not been tampered with or compromised.
Related Guidelines & Policies
Information Security Classification Standard:
https://www.yorku.ca/secretariat/policies/policies/information-security-classification-standard/
Security of University Records on Portable Devices:
https://ipo.info.yorku.ca/tool-and-tips/tip-sheet-11-security-of-university-records-on-portable-devices/
Securing your computer and work devices:
https://www.yorku.ca/uit/infosec/securing-your-computer-and-work-devices/
Best practices for working remotely:
https://www.yorku.ca/uit/infosec/cybersecurity-best-practices-for-working-remotely/