AHMCI
Company Details
Linkedin ID:
american-honda-motor-company-inc-
Website:
Employees number:
14,371
Number of followers:
528,558
NAICS:
3361
Industry Type:
Homepage:
honda.com
IP Addresses:
0
Company ID:
AME_3035349
Scan Status:
In-progress
American Honda Motor Company, Inc. Company CyberSecurity Posture
honda.com
We are Honda. A company built on dreams and the determination to make them come true. Driven by our commitment to society and the planet, our work brings joy to our customers and enhances mobility, as we work to help people everywhere expand their life’s potential. Our products, from cars and trucks, to advanced light jets and other forms of mobility, reflect our belief that the purpose of technology is to help people. Together, we are building an inclusive culture where people feel seen and celebrated. Where associates from a variety of backgrounds can apply their unique ideas and experiences to help us create a cleaner, safer, more exciting mobile world. You’re invited to join Honda on this journey. Your individual skills, passion, persistence, innovative mindset and challenging spirit are needed to help Honda Bring the Future. Bring the Future at honda.com/careers
American Honda Motor Company, Inc. A.I CyberSecurity Scoring
AHMCI Risk Score (AI oriented)Between 750 and 799
AHMCI
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
AHMCI Global Score (TPRM)XXXX
AHMCI
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
AHMCI Company CyberSecurity News & History
Past Incidents
1
Attack Types
1
American Honda Motor Company, Inc.
Vulnerability
Rankiteo Explanation
Attack threatening the economy of a geographical region
Description: Keyless Entry Systems of several Honda Models are vulnerable to Replay Attacks if the hackers are in close proximity. It allows an attacker to intercept and edit the RF signals sent from a remote key to the car and retransmit them later to unlock the vehicle at will. Honda cited that it is relentless to overcome newer security features easily and it requires an attacker to be in close proximity to the vehicle.
AHMCI Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for AHMCI
Incidents vs Motor Vehicle Manufacturing Industry Average (This Year)
No incidents recorded for American Honda Motor Company, Inc. in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for American Honda Motor Company, Inc. in 2025.
Incident Types AHMCI vs Motor Vehicle Manufacturing Industry Avg (This Year)
No incidents recorded for American Honda Motor Company, Inc. in 2025.
Incident History — AHMCI (X = Date, Y = Severity)
AHMCI cyber incidents detection timeline including parent company and subsidiaries
AHMCI Company Subsidiaries
We are Honda. A company built on dreams and the determination to make them come true. Driven by our commitment to society and the planet, our work brings joy to our customers and enhances mobility, as we work to help people everywhere expand their life’s potential. Our products, from cars and trucks, to advanced light jets and other forms of mobility, reflect our belief that the purpose of technology is to help people. Together, we are building an inclusive culture where people feel seen and celebrated. Where associates from a variety of backgrounds can apply their unique ideas and experiences to help us create a cleaner, safer, more exciting mobile world. You’re invited to join Honda on this journey. Your individual skills, passion, persistence, innovative mindset and challenging spirit are needed to help Honda Bring the Future. Bring the Future at honda.com/careers
Loading...
AHMCI Similar Companies
DENSO
DENSO is one of the world's largest automotive suppliers with a 75-year history of providing advanced automotive systems and technology to automakers worldwide. While our products are featured on nearly every vehicle make and model on the road today, we're also looking to innovate beyond automotive
#WeAreProgress ++ Progress is in our DNA. It’s not just in our cars, but also in us. The focus at Audi is on us – the people – and we are shaping the future of mobility together. With our inner drive. With the aim to continuously improve. With our mindset, courage and confidence. Because progress de
Volkswagen do Brasil
A gente sabe que o nome “Volkswagen” com certeza deve fazer parte da sua história. Porque a gente também sabe que não é à toa que estamos na vida, no coração e na garagem dos brasileiros. O segredo? Construímos os carros mais inovadores, tornamos as tecnologias acessíveis e dizemos sempre que estamo
OPmobility
OPmobility is a world leader in sustainable mobility and a technology partner to mobility players worldwide. Driven by innovation since its creation in 1946, the Group is today composed of five complementary business groups that enable it to offer its customers a wide range of solutions: intelligent
Motherson Group
Founded in 1975, Motherson is one of the world’s leading auto component makers, supplying OEMs globally from over 400 facilities in 44 countries spread across five continents with over 190,000 employees. Within the automotive industry, it is one of the leading global manufacturers of exterior rear
We don't just make history -- we make the future. Ford put the world on wheels over a century ago, and our teams are re-inventing icons and creating groundbreaking connected and electric vehicles for the next century. We believe in serving our customers, our communities, and the world. If you do, to
International
We build International trucks and engines and IC Bus® school and commercial buses that are as tough and as smart as the people who drive them. Our solutions deliver greater uptime and productivity to fleets across North America. We also develop Fleetrite® aftermarket parts. In everything we do, our
Goodyear Germany GmbH
Ein Konzern mit starken Marken Die Goodyear Dunlop Tires Germany GmbH ist Teil des weltweit agierenden Reifenherstellers Goodyear. Rund 70.000 Menschen auf der ganzen Welt arbeiten täglich daran, unsere Erfolgsgeschichte fortzuschreiben. In Deutschland betreiben wir an sieben Standorten sechs Pro
Tesla
Tesla is accelerating the world’s transition to sustainable abundance. To achieve our mission, we're building a world powered by solar, enabled by battery storage and transported by electric vehicles. We’re committed to hiring and developing top talent from around the world for any given disciplin
.png)
AHMCI CyberSecurity News
November 22, 2025 01:47 AM
Honda Must Face Lawsuit Over Alleged Brake Defects
A California federal judge on Thursday preserved some claims from a proposed class action alleging that the automatic emergency braking...
November 12, 2025 10:00 AM
States’ Privacy Concerns Multiply as Streaming Platforms Boom
California, Michigan, and Florida are among the states pushing streaming companies to comply with privacy laws.
November 07, 2025 08:00 AM
Honda to recall over 406,000 US vehicles over wheel detachment issue, NHTSA says
Honda Motor is recalling 406290 vehicles in the U.S. over a manufacturing flaw that could cause aluminium alloy wheels to detach, the U.S....
November 01, 2025 07:00 AM
Honda eyes comeback with revamped car fleet
International Business News: Plans to drive in 10 new models, including 7 SUVs; India among 3 key growth pillars: CEO.
October 21, 2025 07:00 AM
Lobbying Update: $910,000 of AMERICAN HONDA MOTOR CO. INC. lobbying was just disclosed
of AMERICAN HONDA MOTOR CO. INC. lobbying was just disclosed, from Q3 of 2025, in a new Lob.
October 09, 2025 07:00 AM
California Privacy Agency Fines Tractor Supply $1.35 Million Over CCPA Violations
On September 30, 2025, the California Privacy Protection Agency (“Agency”) announced a decision and $1.35 million fine to resolve...
October 06, 2025 07:00 AM
Astrobotic, Honda developing vertical solar, storage solution for lunar missions
Pittsburgh-based aerospace company Astrobotic and Honda's North American subsidiary are working on integrating Astrobotic's vertical solar...
September 22, 2025 07:00 AM
Stellantis, the Maker of Citroën, FIAT, Jeep, and Other Cars, Confirms Data Breach
Automotive giant Stellantis, the parent company of major brands including Citroën, FIAT, Jeep, Chrysler, and Peugeot, has confirmed a data...
September 03, 2025 07:00 AM
Honda Fights FCC Adding Car Technologies To Security List
Honda has told the Federal Communications Commission that adding certain vehicle technologies to the government's "covered list" of banned...
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
AHMCI CyberSecurity History Information
Official Website of American Honda Motor Company, Inc.
The official website of American Honda Motor Company, Inc. is https://www.honda.com/careers.
American Honda Motor Company, Inc.’s AI-Generated Cybersecurity Score
According to Rankiteo, American Honda Motor Company, Inc.’s AI-generated cybersecurity score is 789, reflecting their Fair security posture.
How many security badges does American Honda Motor Company, Inc.’ have ?
According to Rankiteo, American Honda Motor Company, Inc. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does American Honda Motor Company, Inc. have SOC 2 Type 1 certification ?
According to Rankiteo, American Honda Motor Company, Inc. is not certified under SOC 2 Type 1.
Does American Honda Motor Company, Inc. have SOC 2 Type 2 certification ?
According to Rankiteo, American Honda Motor Company, Inc. does not hold a SOC 2 Type 2 certification.
Does American Honda Motor Company, Inc. comply with GDPR ?
According to Rankiteo, American Honda Motor Company, Inc. is not listed as GDPR compliant.
Does American Honda Motor Company, Inc. have PCI DSS certification ?
According to Rankiteo, American Honda Motor Company, Inc. does not currently maintain PCI DSS compliance.
Does American Honda Motor Company, Inc. comply with HIPAA ?
According to Rankiteo, American Honda Motor Company, Inc. is not compliant with HIPAA regulations.
Does American Honda Motor Company, Inc. have ISO 27001 certification ?
According to Rankiteo,American Honda Motor Company, Inc. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of American Honda Motor Company, Inc.
American Honda Motor Company, Inc. operates primarily in the Motor Vehicle Manufacturing industry.
Number of Employees at American Honda Motor Company, Inc.
American Honda Motor Company, Inc. employs approximately 14,371 people worldwide.
Subsidiaries Owned by American Honda Motor Company, Inc.
American Honda Motor Company, Inc. presently has no subsidiaries across any sectors.
American Honda Motor Company, Inc.’s LinkedIn Followers
American Honda Motor Company, Inc.’s official LinkedIn profile has approximately 528,558 followers.
NAICS Classification of American Honda Motor Company, Inc.
American Honda Motor Company, Inc. is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.
American Honda Motor Company, Inc.’s Presence on Crunchbase
No, American Honda Motor Company, Inc. does not have a profile on Crunchbase.
American Honda Motor Company, Inc.’s Presence on LinkedIn
Yes, American Honda Motor Company, Inc. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/american-honda-motor-company-inc-.
Cybersecurity Incidents Involving American Honda Motor Company, Inc.
As of November 27, 2025, Rankiteo reports that American Honda Motor Company, Inc. has experienced 1 cybersecurity incidents.
Number of Peer and Competitor Companies
American Honda Motor Company, Inc. has an estimated 12,405 peer or competitor companies worldwide.
What types of cybersecurity incidents have occurred at American Honda Motor Company, Inc. ?
Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.
Incident Details
Can you provide details on each incident ?
Title: Vulnerability in Honda Keyless Entry Systems
Description: Keyless Entry Systems of several Honda Models are vulnerable to Replay Attacks if the hackers are in close proximity. It allows an attacker to intercept and edit the RF signals sent from a remote key to the car and retransmit them later to unlock the vehicle at will. Honda cited that it is relentless to overcome newer security features easily and it requires an attacker to be in close proximity to the vehicle.
Type: Vulnerability
Attack Vector: Replay Attack
Vulnerability Exploited: Interception and editing of RF signals
Motivation: Unauthorized access to the vehicle
What are the most common types of attacks the company has faced ?
Common Attack Types: The most common types of attacks the company has faced is Vulnerability.
How does the company identify the attack vectors used in incidents ?
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through RF signals from remote key.
Impact of the Incidents
What was the impact of each incident ?
Incident : Vulnerability AME16146422
Systems Affected: Keyless Entry Systems
Which entities were affected by each incident ?
Initial Access Broker
How did the initial access broker gain entry for each incident ?
Incident : Vulnerability AME16146422
Entry Point: RF signals from remote key
Post-Incident Analysis
What were the root causes and corrective actions taken for each incident ?
Incident : Vulnerability AME16146422
Root Causes: Vulnerability in RF signal transmission
Additional Questions
Impact of the Incidents
Initial Access Broker
What was the most recent entry point used by an initial access broker ?
Most Recent Entry Point: The most recent entry point used by an initial access broker was an RF signals from remote key.
.png)
Latest Global CVEs (Not Company-Specific)
Description
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
- https://github.com/angular/angular/commit/0276479e7d0e280e0f8d26fa567d3b7aa97a516f
- https://github.com/angular/angular/commit/05fe6686a97fa0bcd3cf157805b3612033f975bc
- https://github.com/angular/angular/commit/3240d856d942727372a705252f7c8c115394a41e
- https://github.com/angular/angular/releases/tag/19.2.16
- https://github.com/angular/angular/releases/tag/20.3.14
- https://github.com/angular/angular/releases/tag/21.0.1
- https://github.com/angular/angular/security/advisories/GHSA-58c5-g7wp-6w37
Description
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=american-honda-motor-company-inc-' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
