diff --git a/README.md b/README.md
index c0fae9e3dc..8042732bb9 100644
--- a/README.md
+++ b/README.md
@@ -75,6 +75,10 @@ You can find resources to help you get started on our [documentation website](ht
 
 ![secureCodeBox Architecture](./docs/resources/scb-architecture.svg)
 
+## Upgrading
+
+For the steps required for upgrading your secureCodeBox installation, see [Upgrading](./UPGRADING.md).
+
 ## License
 
 Code of secureCodeBox is licensed under the [Apache License 2.0][scb-license].
diff --git a/UPGRADING.md b/UPGRADING.md
new file mode 100644
index 0000000000..fecc2e9547
--- /dev/null
+++ b/UPGRADING.md
@@ -0,0 +1,17 @@
+# Upgrading
+
+## From 2.X to 3.X
+
+### Renamed `lurcher` to `lurker`
+
+In the 3.0 release, we corrected the misspelling in `lurcher`. To remove the remains after upgrade, delete the old service accounts and roles from the namespaces where you have executed scans in the past:
+
+```bash
+# Find relevant namespaces
+kubectl get serviceaccounts --all-namespaces | grep lurcher
+
+# Delete role, role binding and service account for the specific namespace 
+kubectl --namespace <NAMESPACE> delete serviceaccount lurcher
+kubectl --namespace <NAMESPACE> delete rolebindings lurcher
+kubectl --namespace <NAMESPACE> delete role lurcher
+```