A Finnish HVAC company and a U.S. car dealership both experienced embarrassing threat management blunders. Both organizations made a combination of four rookie mistakes regarding threat management. Valtia had its central heating systems connected to the internet for both buildings, and neither of them had any firewalls to protect the network. The car dealerships in question were part of the DealerBuilt customer relationship management (CRM) network, which is used by hundreds of dealers around the country. As a result of weak security, several apartment buildings went without heat and millions of customers and employees had their data stolen.”]
Source: https://securityintelligence.com/avoiding-threat-management-rookie-mistakes/