# Should we report a cyber incident to the police as well as the regulator?

Often yes, but it is a separate decision from regulatory reporting. A ransomware attack, data theft, fraud or extortion is usually a crime, and a criminal complaint can help with insurance claims, with banks trying to recall a fraudulent transfer, and with investigations that link your case to others; some insurers ask for a police reference. A complaint to the police does not replace notifications to the CSIRT, the competent authority or the data protection authority, and those do not replace a complaint. Many countries have specialised cybercrime units or online forms. Before filing, agree with your lawyers and incident-response firm what evidence to hand over and how to preserve it, so you do not destroy what investigators need. NIS2 early warnings already ask whether you suspect an unlawful or malicious act; your answer and a police report should be consistent.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Incident reporting deadlines](https://netsenx.com/en/faq/reporting) · https://netsenx.com/en/faq/should-we-report-a-cyber-incident-to-the-police

## Read next

- https://netsenx.com/en/nis2-incident-reporting-deadlines
- https://netsenx.com/en/nis2-network-monitoring

## Related questions

- [What information should an incident report to the authorities contain?](https://netsenx.com/en/faq/what-should-an-incident-report-contain)
- [Do we still have to report an incident that is already resolved?](https://netsenx.com/en/faq/can-we-report-an-incident-that-is-already-resolved)
- [What reduces a GDPR fine after a data breach?](https://netsenx.com/en/faq/what-reduces-a-gdpr-fine-after-a-data-breach)
- [Can NetSenX prepare a GDPR Article 33 breach notification?](https://netsenx.com/en/faq/can-netsenx-prepare-a-gdpr-article-33-notification)
- [Does a security tool's audit log help with IT general controls?](https://netsenx.com/en/faq/does-a-security-tools-audit-log-help-with-it-general-controls)