Reporting Security Issue

At GREEFA, we are committed to ensuring the highest level of digital security and resilience for our products. In accordance with the reporting obligation following from the EU Cyber Resilience Act (CRA), this dedicated reporting point allows our EU customers and partners to report any actively exploited vulnerabilities or severe cybersecurity incidents.

The reported issues will be evaluated by our cyber security team. In case of severe incidents, we will report the incident within 24 hours to the NCSC, the Dutch cyber security authority.

When does this apply:

Your machine is operational in the EU area
Your machine was delivered after 11 september 2026
The issue is a real cyber incident

Other types of issues can be reported at GREEFA Servicedesk

Report security incident

Company name(Required)

Your company name

Client number(Required)

Your client number. You can find this number on the licence plate on your machine.

Contact person(Required)

Please enter your first and last name

Email address(Required)

Please enter the email address where we can contact you.

Phone(Required)

Country Phone Number

Product or system concerned(Required)

Enter the name of the product

Order number(Required)

You can find this number on the type plate.

Please enter a number from 0 to 99999.

Software or firmware version

Enter the software or firmware version involved, if known.

Type of security issue(Required)

Ransomware

Virus

Data breach

GDPR breach

Anomalous behaviour

Other

What caused the incident?

Give a description, if known.

Description of system behaviour(Required)

Describe the systems behaviour caused by the security issue.

Potential impact

Explain what could happen if the issue is not fixed.

Steps to reproduce the issue

Describe the steps needed to reproduce the issue so we can investigate it.

What happens if you report a security incident? We will:

treat your report confidentially;
investigate the severity of the reported issue;
In case of a high severity issue, we will notify the NCSC within 24 hours;
use your personal data solely for handling the report;
send you a link to the issue’s ticket by email.

Further we ask you that you do not publicly disclose the incident until a solution is available.

To suppress spam, the reported issues are filtered based on your order number and client number. Please check the correctness of these fields.

Your report helps us improve the security of our products and systems and reduce risks for customers, users, and GREEFA.

Questions?

If you have questions about our cyber security treatment or about a report you have submitted, you can add them to the issue’s ticket.