Report an IT Security Incident or Vulnerability

We are continuously working to improve the security of our products. To support this, groninger operates a dedicated team responsible for the assessment and handling of reported security incidents and vulnerabilities.

If you discover a potential vulnerability or a security-related incident, you can report it to us at any time. Your report will not result in any disadvantage to you, provided it is made in good faith and to the best of your knowledge. Even reports that later turn out to be not relevant help us to further improve the security of our products.

This reporting channel is exclusively intended for cybersecurity-related topics, such as:

  • security vulnerabilities
  • suspicious system activities
  • potential attacks

Important:
Please continue to report technical faults or operational issues via the established service and support channels.

What information should your report include?

Affected product

  • System, machine, or control unit (e.g. PLC, HMI)
  • Location (plant / area)
  • If applicable, network environment (e.g. production network, remote access)

Description of the incident

  • What did you observe?
  • Why do you suspect a security issue?
  • What type of incident is it?
    • Unauthorized access or login attempts
    • Unusual changes to programs or parameters
    • Suspicious network activity
    • Suspected malware
    • Security vulnerability (e.g. unsecured interface)

Timing and context

  • When did the incident occur?
  • Were there any changes beforehand (e.g. maintenance, software updates, remote access)?
  • Were there any unusual system behaviors (e.g. unexpected messages, unknown activities, or irregular network behavior)?

Evidence and impact

  • Screenshots, photos, or log files (if available)
  • Impact on the system, production, or operations
  • Potential risks to personnel or products

What happens after you submit your report?

Once your report has been received, it will be reviewed and assessed by our security team. You will receive a personal response as quickly as possible.

Based on the assessment, we will initiate appropriate measures – ranging from immediate remediation to prioritized further handling. We will keep you informed transparently about the progress, including the current status and planned actions.