Cybercrime: When to call in the FBI

28.07.2006
When a company thinks it might have been the victim of a cybercrime, it's not always easy to figure out when to call in the feds for help. FBI agents Nenette Day and Andrew G. Arena answered some frequently asked questions about how companies can get help in the struggle with cybercrime.

If I have a problem, when should I come to the FBI versus a state or local law enforcement agency?

Arena: Most of this stuff is going to be interstate, if not international. We have a legal attache system. ... Between our relationships with our international partners with our legal attache offices, we hope to reach into those countries. We can hopefully have the wherewithal to reach into the country to try to get action quicker.

If my company is a victim and I go to the FBI, how do I know that the information isn't going to get out and embarrass my company?

Arena: It's not in our interest for that information to get out before our investigation is completed. Most times, it's somebody inside the company [who] for whatever reason puts that information out. When the investigation is completed and we begin the prosecution, obviously there is going to be publicity, and there's nothing we can do. At that point, you have to put the best spin on it you can. Any company that comes forward and assists law enforcement in stopping this problem, I think that will be seen as a positive.

If the damage is already done, what is the benefit of contacting the FBI, especially if I want to keep it as quiet as possible?