Comparison Overview

Assurant

VS

Manulife

Assurant

260 Interstate North Circle SE, None, Atlanta, Georgia, US, 30339
Last Update: 2025-12-09
Between 750 and 799

Assurant is a leading global business services company that supports, protects, and connects major consumer purchases. A Fortune 500 company with a presence in 21 countries, Assurant supports the advancement of the connected world by partnering with the world’s leading brands to develop innovative solutions and deliver an enhanced customer experience through mobile device solutions, extended service contracts, vehicle protection services, renters insurance, lender-placed insurance products, and other specialty products. Thank you for visiting Assurant’s LinkedIn community. Before posting, please review our guidelines at https://www.assurant.com/social-community-guidelines.

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 15,888
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Manulife

200 Bloor St E, Toronto, Ontario, CA, M4W
Last Update: 2025-12-10
Between 800 and 849

Manulife is a leading international financial services group that helps people make their decisions easier and lives better. With our global headquarters in Toronto, we operate as Manulife across our offices in Canada, Asia, and Europe, and primarily as John Hancock in the United States. We have more than 40,000 employees, over 116,000 agents serving ~34 million customers worldwide, and over $1.3 trillion in assets under management and administration. Visit www.Manulife.com to find out more. For Manulife terms of use, please visit http://bit.ly/SM_Terms

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 33,292
Subsidiaries: 2
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/assurant.jpeg
Assurant
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/manulife-financial.jpeg
Manulife
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Assurant
100%
Compliance Rate
0/4 Standards Verified
Manulife
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Assurant in 2025.

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Manulife in 2025.

Incident History — Assurant (X = Date, Y = Severity)

Assurant cyber incidents detection timeline including parent company and subsidiaries

Incident History — Manulife (X = Date, Y = Severity)

Manulife cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/assurant.jpeg
Assurant
Incidents

No Incident

https://images.rankiteo.com/companyimages/manulife-financial.jpeg
Manulife
Incidents

No Incident

FAQ

Manulife company demonstrates a stronger AI Cybersecurity Score compared to Assurant company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Manulife company has disclosed a higher number of cyber incidents compared to Assurant company.

In the current year, Manulife company and Assurant company have not reported any cyber incidents.

Neither Manulife company nor Assurant company has reported experiencing a ransomware attack publicly.

Neither Manulife company nor Assurant company has reported experiencing a data breach publicly.

Neither Manulife company nor Assurant company has reported experiencing targeted cyberattacks publicly.

Neither Assurant company nor Manulife company has reported experiencing or disclosing vulnerabilities publicly.

Neither Assurant nor Manulife holds any compliance certifications.

Neither company holds any compliance certifications.

Manulife company has more subsidiaries worldwide compared to Assurant company.

Manulife company employs more people globally than Assurant company, reflecting its scale as a Insurance.

Neither Assurant nor Manulife holds SOC 2 Type 1 certification.

Neither Assurant nor Manulife holds SOC 2 Type 2 certification.

Neither Assurant nor Manulife holds ISO 27001 certification.

Neither Assurant nor Manulife holds PCI DSS certification.

Neither Assurant nor Manulife holds HIPAA certification.

Neither Assurant nor Manulife holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Risk Information
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X