Notice of Bankruptcy, Convictions and Security Breaches
The Registrar Accreditation Agreement (RAA) requires ICANN-accredited registrars to notify ICANN within seven days of bankruptcy, certain convictions, and security breaches involving registrant account information or registration data. Additional information on this requirement is in Section 3.20 of the RAA.
To notify ICANN about one of these occurrences, please email [email protected],
Subject: Registrar Bankruptcy, Conviction or Security Breach.
Reporting template for Registrar Security Breach:
Registrar Name:
IANA ID:
Date of Incident:
Time of Incident (UTC):
Date of incident report to ICANN:
Detailed description of the type of unauthorized access:
Type of security breach: breaches of registrar systems, or unauthorized release of data by the registrar itself, or unauthorized access/disclosure due to individual registrants losing control over their credentials in a way not attributable to their registrar's systems or controls
How the incident occurred:
Number of registrants affected:
Number of domain names affected:
Any action taken by Registrar in response:
Cause of breaches identified | |||||||
---|---|---|---|---|---|---|---|
Time Period | # of Breaches Reported | # of Registrars Affected | # of Registrants Affected | # of Domains Affected | Due to breaches of registrar systems: | Due to unauthorized release of data by the registrar itself: | Due to unauthorized access/disclosure due to individual registrants losing control over their credentials in a way not attributable to their registrar's systems or controls: |
Jan to Mar 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Apr to June 2025 | 3 | 3 | 689,826 | 1,267,551 | 2 | 1 | 0 |
July to Sep 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Oct to Dec 2025 | |||||||
Jan to Mar 2026 | |||||||
Apr to June 2026 |