INCIDENT REPORT

About the security incident (SI) based on Article 118. Of the Electronic Communication Act and General act on the notification and evaluation of security incidents and or announcements of network outages and restrictions (GA)

Operator, address
Operators ID of SI
Contact person e-mail and telephone number

Date and time of SI	Duration	% and number of affected users	Importance of SI (internal classification)

Impact of SI according to Article 6 of GA
Insignificant	YES
Significant	YES
Highly significant	YES

Compromised security attributes
confidentiality	YES
integrity	YES
availability	YES
authenticity	YES

Service impact	Estimation of affected users/connections
Number-based interpersonal communications service
Number-independent interpersonal communications services
Broadband services
Machine-to-machine services (M2M, IoT)
Impact on emergency call for 112 Impact on emergency call for police 113 Impact on number 116 000 for missing children hotline
Impact on interconnections
Other (specify)

Impacted services	Impacted subjects
Services to critical infrastructure
Services to operators of essential services
Services to the state administration bodies
Key network elements for national security
Services to other operators
Interconnection
Domain name services (DNS)
Access aggregation node or transmission systems
Network management (control and security functions)
Other (specify)

Impacted region	Mura Drava Carinthia Savinja Lower Sava Central Sava Upper Carniola Central Slovenia Southeast Slovenia Gorizia Inner Carniola-Karst Coastal - Karst All Slovenia

Impact on confidentiality	Assessment of impacted users/connections
Unauthorized disclosure, modification or alienation of traffic data, location data, log records, passwords or settings of key parts of the network
Unauthorized disclosure of communications content
Targeted attack on network and services
Unauthorized access or viewing to the user base
Unauthorized access or viewing of support information systems or network elements
Vulnerability, improper setup or process affected the integrity or authenticity of the network (deceit, abuse and cybercrime)
Other (specify)

Root and initial cause of incident
System failure	Hardware failure Software failure System overload Other (specify)
Human error	Equipment misconfiguration Software update failure Bad maintenance Policy/procedure flaw Other (specify)
Natural phenomena	Heavy rain and wind Flood/water spout Fire Earthquake Frost Other (specify)
Malicious actions	Physical attack Logical attack into system Malicious code (virus,worm, trojan horse..) Cyber attack (DDoS, phishing..) Other (specify)
Third party failures	Cable cut Power cut Other (specify)

Affected network/s	Access Fix Mobile Aggregation/Distribution Core Service Delivery Platform
Affected asset/s	Access node (DSLAM, MSAN, CMTS, OLT, Access switch..) Base station (BTS, NodeB, eNodeB, WLAN AP) Admission and signalization (BSC, RNC, MGW, MME, PCRF, AMF, SMF …) Transport systems (WDM, SDH,, …) Registers/AAA (AuC, EIR, HLR/HSS, VLR, RADIUS, LDAP, RSA, DRM, UDM, UDR..) Core/aggregation router (S/GGSN, S/P-GW, ePDG, BRAS, P/PE..) Aggregation switch Switching/service system (MSC, VLR, SMSC, SSW, CSCF…) Security systems (FW, IDS/IPS, SBC, LI..) Information systems Storage system OSS/BSS/OAM systems Database Applications and services for: IPTV, VoD, VoIP, SMSC, WWW, DNS, DHCP, E-mail,… Passive equipment (cables, splitters, cabinets…) Cooling systems Power supply systems (AC/DC power supplies, batteries, UPS, generators..) 5G Network functions (UPF, NSSF, NRF, SEPP AUSF) Other (specify)

Notifications	Date, time and web page (link) of first notification:
Notifying public	YES NO
Notifying users	YES NO
Notifying other operators	YES NO
Notifying other affected subjects	YES NO

Description of the incident
Indicators of abuse
Incident response and recovery actions
Impact on other interconnected networks and operators
Help of national CSIT	YES NO
Post-incident actions taken to prevent SI re-occurring
Lessons learnt

Legal notice: We hereby declare that all information provided in the notification is true, accurate and complete, for what we assume all the material and criminal liability.

Date and address	Stamp	Signature of legal person