What is the official website of Aon Affinity Travel Practice ?

The official website of Aon Affinity Travel Practice is http://www.aonaffinitytravelpractice.com.

What is Aon Affinity Travel Practice's cybersecurity risk score?

Aon Affinity Travel Practice has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Aon Affinity Travel Practice experienced?

According to Rankiteo, Aon Affinity Travel Practice currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Aon Affinity Travel Practice been affected by any supply chain cyber incidents ?

According to Rankiteo, Aon Affinity Travel Practice has been affected by a supply chain cyber incident involving NA, with the incident ID OFCK&LAONPROKIRSHEPWCMOV1781843490.

Does Aon Affinity Travel Practice have SOC 2 Type 1 certification ?

According to Rankiteo, Aon Affinity Travel Practice is not certified under SOC 2 Type 1.

Does Aon Affinity Travel Practice have SOC 2 Type 2 certification ?

According to Rankiteo, Aon Affinity Travel Practice does not hold a SOC 2 Type 2 certification.

Does Aon Affinity Travel Practice comply with GDPR ?

According to Rankiteo, Aon Affinity Travel Practice is not listed as GDPR compliant.

Does Aon Affinity Travel Practice have PCI DSS certification ?

According to Rankiteo, Aon Affinity Travel Practice does not currently maintain PCI DSS compliance.

Does Aon Affinity Travel Practice comply with HIPAA ?

According to Rankiteo, Aon Affinity Travel Practice is not compliant with HIPAA regulations.

Does Aon Affinity Travel Practice have ISO 27001 certification ?

According to Rankiteo,Aon Affinity Travel Practice is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Aon Affinity Travel Practice operate in ?

Aon Affinity Travel Practice operates primarily in the Insurance industry.

How many employees does Aon Affinity Travel Practice have ?

Aon Affinity Travel Practice employs approximately 104 people worldwide.

Does Aon Affinity Travel Practice own any subsidiaries ?

Aon Affinity Travel Practice presently has no subsidiaries across any sectors.

How many LinkedIn followers does Aon Affinity Travel Practice have ?

Aon Affinity Travel Practice's official LinkedIn profile has approximately 4,150 followers.

What is the NAICS classification code for Aon Affinity Travel Practice ?

Aon Affinity Travel Practice is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does Aon Affinity Travel Practice have a Crunchbase profile ?

No, Aon Affinity Travel Practice does not have a profile on Crunchbase.

Does Aon Affinity Travel Practice have a LinkedIn profile ?

Yes, Aon Affinity Travel Practice maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/aon-affinity-travel.

How many cybersecurity incidents has Aon Affinity Travel Practice experienced ?

As of August 11, 2026, Rankiteo reports that Aon Affinity Travel Practice has experienced 5 cybersecurity incidents.

How many peer or competitor companies does Aon Affinity Travel Practice have ?

Aon Affinity Travel Practice has an estimated 15,669 peer or competitor companies worldwide.

What types of cybersecurity incidents has Aon Affinity Travel Practice faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Data Leak, Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

AATP

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Aon Affinity Travel Practice Vendor Cyber Rating & Cyber Score

aonaffinitytravelpractice.com

Add Your Compliance Badge

Aon is in the Business of Better Decisions We shape decisions for the better — to protect and enrich the lives of people around the world. We believe that businesses thrive when the communities they serve and the people they employ also flourish. Our culture enables us to bring our best each day and do great work for our clients and their customers. Aon Affinity's Travel Practice is a leader in the provision of customized travel insurance programs for many of the world's most renown travel companies. With a focus on the design, distribution, and management of customized travel insurance programs, we aspire to provide unmatched service to our travel clients and to the travelers protected under our travel protection programs. On this

AATP A.I CyberSecurity Scoring

Scoring History

AATP

Aon Affinity Travel Practice CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Aon

Ransomware

100

7/2023

OFCK&LAONPROKIR...

Aon Affinity Travel...

Data Leak

07/2023

AON20209723

Aon Affinity Travel...

Cyber Attack

02/2022

AON19301322

Aon Affinity Travel...

Breach

12/2020

AON604072625

Aon Affinity Travel...

Breach

5/2020

AON427072825

Loading…

A.I.

AATP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for AATP

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for Aon Affinity Travel Practice in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Aon Affinity Travel Practice in 2026.

Incident Types AATP vs Insurance Industry Avg (This Year)

No incidents recorded for Aon Affinity Travel Practice in 2026.

Incident History - AATP (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Aon Affinity Travel Practice Subsidiaries

AATP

Insurance

Website: http://www.aonaffinitytravelpractice.com

Company Size: 104

AonFinancial Services

Aon's Reinsurance SolutionsFinancial Services

Aon Learning CenterProfessional Training and Coaching

Aon Centre for Innovation and Analytics (ACIA)Financial Services

Aon's Wealth SolutionsFinancial Services

Aon's Human Capital SolutionsHuman Resources Services

Aon's Health SolutionsHuman Resources Services

Aon's Commercial Risk SolutionsFinancial Services

Aon EdgeInsurance

Public Sector PartnershipFinancial Services

Loading…

Aon Affinity Travel Practice Similar Companies

China Life Insurance Co.Ltd

chinalife.com.cn

China Life Insurance (Group) Company, headquartered in Beijing, is a large state-owned financial and insurance company. Its predecessor,PICC was founded in 1949 and the PICC (Life) Co.,Ltd was set up in 1996 after its separation from the former PICC. In 1999, it was renamed China Life Insurance Company. With the approval of the State Council and the China Insurance Regulatory Commission, the former China Life Insurance Company was restructured as China Life Insurance (Group) Company in 2003. It has China Life Insurance Company Limited, China Life Asset Management Company Limited, China Life Property & Casualty Insurance Company Limited, China Life Pension Company Limited, China Life Ecommerce Company Limited, China Life Insurance (Overseas) Company Limited, China Life Investment Holding Company Limited and Insurance Professional College as its subsidiaries. Its business covers life insurance, property & casualty insurance, pension plans (corporate annuity), asset management, alternative investment, overseas operations and e-commerce. Through capital-links, it has invested in several banks, security firms and other non-financial institutions.

Progressive Insurance

cb progressive.com

Every journey has a beginning, and wherever you are on your career path, we want to help you along the way. At Progressive, we exist to help people move forward and live fully. We strive to create a welcoming and flexible work environment for everyone, where employees are encouraged to risk, learn, and grow. With our supportive culture, work-life balance, and one of the largest contemporary art collections in the country, there’s a reason we’ve been named one of the best places to work. For over 80 years, Progressive has offered customers a wide range of insurance choices, including auto, home, renters, commercial auto, small business, motorcycle, boat policies, and more. Progressive is the second largest auto insurer in the country—a combined effort of every single person at Progressive. We’re a dynamic group of more than 65,000 talented employees—from all walks of life, all fields of business, and all 50 states. Everyone here plays a role in our success as we continue to help our customers move forward and live fully. With hundreds of career paths including Claims, Customer Care, Sales, Marketing, Legal, IT, Data Analysis, and more, you are sure to find the destination for your career at Progressive.

HDFC ERGO General Insurance

hdfcergo.com

HDFC ERGO General Insurance Company Limited was promoted by erstwhile Housing Development Finance Corporation Ltd. (HDFC), India’s premier Housing Finance Institution and ERGO International AG, the primary insurance entity of Munich Re Group. Consequent to the implementation of the Scheme of Amalgamation of HDFC with and into HDFC Bank Limited, one of India’s leading private sector bank (Bank), the Company has become a subsidiary of the Bank. The Company offers complete range of general insurance products ranging from motor, health, travel, home and personal accident in the retail space and products like property, marine and liability insurance in the corporate space. With a network of branches spread across wide distribution network and a 24x7 support team, the Company has been offering seamless customer service and innovative products to its customers.

Zurich Insurance

zurich.com

Zurich Insurance Group (Zurich) is a leading global multi-line insurer founded more than 150 years ago, which has grown into a business serving more than 75 million customers in more than 200 countries and territories, while delivering industry-leading total shareholder returns. Our customers include individuals, small businesses, and mid-sized and large companies, as well as multinational corporations. The Group is headquartered in Zurich, Switzerland, where it was founded in 1872. ONE TEAM, ONE PURPOSE We are Zurich, one global company, with one mission, one ambition, one set of shared values and a clear commitment to our stakeholders: our customers, our people, our shareholders, and the communities in which we live and work. You can find our community guidelines on: https://www.zurich.com/services/social-media

AXA XL

axaxl.com

We are a leading provider of insurance and reinsurance offering innovative risk management solutions for businesses worldwide. We partner with those who move the world forward, navigating complex risks and working across diverse industries to support and empower our clients. Note: We are currently experiencing some technical issues with our recruitment platform which we hope to resolve shortly, please be patient with us, thank you for your interest in jobs at AXA XL.

Aviva

cb aviva.com

💛 We're a leading Insurance, Wealth & Retirement business. 📣 Follow for #LifeAtAviva. Aviva is nothing without our people. Living up to our purpose to be with you today for a better tomorrow applies to those we work with just as much as it does to our customers. We want Aviva to be a place where people can be themselves, and we want our workforce to reflect the customers and communities we serve. This means offering market-leading benefits and challenging ourselves to do more to build a workplace – and society – that works for all. It takes you. It takes Aviva.

SBI Life Insurance Co. Ltd.

cb sbilife.co.in

SBI Life Insurance (‘SBI Life’ / ‘The Company’), one of the most trusted life insurance companies in India, was incorporated in October 2000 & is registered with the Insurance Regulatory & Development Authority of India (IRDAI) in March 2001. Serving millions of families across India, SBI Life’s diverse range of products caters to individuals as well as group customers through Protection, Pension, Savings & Health solutions. Driven by ‘Customer-First’ approach, SBI Life places great emphasis on maintaining world-class operating efficiency & providing hassle-free claim settlement experience to its customers by following high ethical standards of service. Additionally, SBI Life is committed to enhance digital experiences for its customers, distributors & employees alike. SBI Life strives to make insurance accessible to all, with its extensive presence across the country through its 1,154 offices, 28,534 employees, a large & productive network of about 268,792 agents, 73 corporate agents & 9 bancassurance partners with more than 40,000 partner branches, 149 brokers & other insurance marketing firms. In addition to doing what’s right for the customers, the company is also committed to provide a healthy & flexible work environment for its employees to excel personally & professionally. SBI Life strongly encourages a culture of giving back to the society & has made substantial contribution in the areas of child education, healthcare, disaster relief & environmental upgrade. In 2024-25, the Company touched over 53,000 direct beneficiaries through various CSR interventions. Listed on the Bombay Stock Exchange ('BSE') & the National Stock Exchange ('NSE'), the company has an authorized capital of Rs. 20.0 billion & a paid-up capital of Rs. 10.0 billion. The AuM is Rs. 4,814.6 billion. For more information, please visit our website-www.sbilife.co.in (Numbers & data mentioned above are for the period ended September 30, 2025)

AIG

aig.com

American International Group, Inc. (NYSE: AIG) is a leading global insurance organization. AIG provides insurance solutions that help businesses and individuals in approximately 190 countries and jurisdictions protect their assets and manage risks through AIG operations and network partners. Additional information about AIG can be found at www.aig.com | https://www.youtube.com/aig | https://twitter.com/aiginsurance | https://www.linkedin.com/company/aig/ | https://www.facebook.com/AIGInsurance | http://www.instagram.com/aiginsurance/ AIG is the marketing name for the worldwide property-casualty and general insurance operations of American International Group, Inc. All products and services are written or provided by subsidiaries or affiliates of American International Group, Inc. Products or services may not be available in all countries and jurisdictions, and coverage is subject to underwriting requirements and actual policy language. Non-insurance products and services may be provided by independent third parties. Certain property-casualty coverages may be provided by a surplus lines insurer. Surplus lines insurers do not generally participate in state guaranty funds, and insureds are therefore not protected by such funds. AIG Social Media Community Guidelines: https://www.aig.com/home/about/social-media-guidelines

Nationwide

nationwide.com

Nationwide, a Fortune 100 company based in Columbus, Ohio, is one of the largest and strongest diversified insurance and financial services organizations in the United States. Nationwide is rated A+ by Standard & Poor's. An industry leader in driving customer-focused innovation, Nationwide provides a full range of insurance and financial services products including auto, business, homeowners, farm and life insurance; public and private sector retirement plans, annuities and mutual funds; excess & surplus, specialty and surety; and pet, motorcycle and boat insurance. For more information, visit www.nationwide.com.

Loading…

NEWS

Aon Affinity Travel Practice CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

May 11, 2025 07:00 AM

This Overlooked Travel Essential Is Now A 2025 Summer Must-Have

Travel insurance sales are surging, according to experts. Here's why a good policy is an important part of your next trip — and how you can...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-8718

SUMMARY

tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 8.4)

cvss3

Base Score: 8.4

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Impact Score

5.8

Exploitability

REFERENCES

CVE-2026-48161

SUMMARY

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/dai-shi/react18-use/security/advisories/GHSA-32xh-vg5f-64fm

CVE-2026-11812

SUMMARY

The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 2.5)

cvss3

Base Score: 2.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

REFERENCES

CVE-2026-11811

SUMMARY

The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2025-30241

SUMMARY

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.tp-link.com/us/support/faq/5239/

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…