Share useful context, not secrets
A clear account of what happened helps the responsible team understand the concern.
Describe the event
Say what you noticed and when it happened, using approximate times if needed.
- Identify the work account, device, or information involved without including secrets.
- Explain what you clicked, approved, sent, or changed, if anything.
Keep credentials private
Never include passwords, authentication codes, or recovery codes in a report or ordinary message.
- Do not forward sensitive credentials to colleagues.
- Follow instructions only through the organization's approved route.
Urgent concern or routine question?
Choose based on what may be at risk; use the actual support destinations approved by your organization.
Possible security concern
An account or device may be compromised, an unexpected sign-in was approved, or information may have reached the wrong audience.
- Contact the approved urgent IT or security route promptly.
- Include what happened, when, and what action you took.
- Do not send passwords or authentication codes.
Routine question
You need ordinary help with a device or sign-in and have no indication of a security incident.
- Use the organization's established IT support route.
- If new facts suggest a risk, switch to the approved urgent route.
Review the related topic
For sign-in prompts, account details, and device habits, see Accounts and devices. If a message prompted the concern, see Suspicious messages. For a possible unintended information share, see Sharing information.