Company Details
bell
33,894
363,183
517
bell.ca
0
BEL_1877834
In-progress


Bell Company CyberSecurity Posture
bell.caWe advance how people connect with each other and the world #ConnectionIsEverything. Bell is Canada's largest communications company providing advanced Bell broadband wireless, Internet, TV, media and business communications services. Founded in Montréal in 1880, Bell is wholly owned by BCE Inc. To learn more, please visit Bell.ca or BCE.ca Through Bell for Better, we are investing to create a better today and a better tomorrow by supporting the social and economic prosperity of our communities. This includes the Bell Let's Talk initiative, which promotes Canadian mental health with national awareness and anti-stigma campaigns like Bell Let's Talk Day and significant Bell funding of community care and access, research and workplace initiatives throughout the country. To learn more, please visit Bell.ca/LetsTalk
Company Details
bell
33,894
363,183
517
bell.ca
0
BEL_1877834
In-progress
Between 750 and 799

Bell Global Score (TPRM)XXXX

Description: Hackers have illegally obtained customer information, primarily subscriber names and e-mail addresses. Up to 100,000 customers were affected by the hack. Hackers accessed nearly 1.9 million Bell customer e-mail addresses as well as 1,700 names and phone numbers.
Description: Bell suffered from a data breach incident that exposed1.9 million customer e-mail addresses, and 700 names and phone numbers were illegally accessed. Financial, password or other sensitive personal information was not accessed. Bell takes swift action to protect vulnerable systems. The business has contacted the Office of the Privacy Commissioner and has been closely collaborating with the RCMP cybercrime unit in its investigation.


No incidents recorded for Bell in 2026.
No incidents recorded for Bell in 2026.
No incidents recorded for Bell in 2026.
Bell cyber incidents detection timeline including parent company and subsidiaries

We advance how people connect with each other and the world #ConnectionIsEverything. Bell is Canada's largest communications company providing advanced Bell broadband wireless, Internet, TV, media and business communications services. Founded in Montréal in 1880, Bell is wholly owned by BCE Inc. To learn more, please visit Bell.ca or BCE.ca Through Bell for Better, we are investing to create a better today and a better tomorrow by supporting the social and economic prosperity of our communities. This includes the Bell Let's Talk initiative, which promotes Canadian mental health with national awareness and anti-stigma campaigns like Bell Let's Talk Day and significant Bell funding of community care and access, research and workplace initiatives throughout the country. To learn more, please visit Bell.ca/LetsTalk


PT Telkom Indonesia (Persero) Tbk (Telkom) is a state-owned information and communications technology enterprise and telecommunications network in Indonesia. The Government of Indonesia is the majority shareholder with 52.09 percent shares while the remaining 47.91 percent shares belong to public sh
Tata Communications is a digital ecosystem enabler that powers today’s fast-growing digital economy. We enable the digital transformation of enterprises globally, including 300 of the Fortune 500. We carry around 30% of the world’s internet routes and connects businesses to 60% of the world’s cloud

ZTE connects the world with continuous innovation for a better future. The company provides innovative technologies and integrated solutions, and its portfolio spans communication networks, computing infrastructure, industry digital solutions, and personal and home smart terminals. Serving one t

TM is the national connectivity and digital infrastructure provider and Malaysia’s leading integrated telco; offering a comprehensive suite of communication services and solutions in fixed (telephony and broadband), mobility, content, WiFi, ICT, Cloud and smart services. TM is driven by stakeholder
Welcome to Deutsche Telekom. As one of the world's most valuable brands, we design innovative solutions and products in the areas of connectivity, networks, digitalization and security. #connectingyourworld At Deutsche Telekom, we believe that each and every one of us has the power to move society

Safaricom is the leading provider of converged communication solutions in Kenya. In addition to providing a broad range of first-class products and services for Telephony, Broadband Internet and Financial services, Safaricom seeks to uplift the welfare of Kenyans through value-added services and sup

Telcel (Radiomóvil Dipsa) es subsidiaria de América Móvil, uno de los mayores proveedores de comunicaciones celulares de Latinoamérica, grupo líder con inversiones en telecomunicaciones en varios países del continente americano. Telcel es la empresa de telefonía celular líder en México. Nuestra s

Indosat Ooredoo Hutchison (IDX: ISAT) ("IOH"), are here with our vision to become the most preferred digital telecommunications company of Indonesia. The IOH merger combines two highly complementary businesses between PT Indosat Tbk (“Indosat Ooredoo”) and PT Hutchison 3 Indonesia to create a new wo

Lumen connects the world. We digitally connect people, data and applications – quickly, securely and effortlessly. Everything we do at Lumen takes advantage of our network strength. From metro connectivity to long-haul data transport to our edge cloud, security, and managed service capabilities, we
.png)
The US intelligence services are no longer allowed to work with the Swiss company and must remove its products from intelligence community...
Salesforce (CRM) Stock Before the Bell: AI Bets, Informatica Deal and Cybersecurity Risks – What to Watch on November 28, 2025 - TechStock².
Georgia Hunter Bell on Quitting Athletics to go Corporate. "My bones literally broke," she recalled in an interview with the Telegraph. "I kept...
AI is rapidly becoming the backbone of our world, promising unprecedented productivity and innovation. But as organizations deploy AI agents...
Microsoft warns AI agents pose unique cybersecurity risks through 'Confused Deputy' attacks and shadow deployments.
For Mina Movahedi Shakib, cybersecurity has never been just about the technology — it's about the people behind it.
TORONTO — BCE Inc. will begin offering fibre internet services in Western Canada using its rivals' networks under rules it has long opposed,...
The complete cybersecurity compliance report is available on the Auditor's website under the “Reports” section.
Data is a real-time snapshot *Data is delayed at least 15 minutes. Global Business and Financial News, Stock Quotes, and Market Data and...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Bell is https://letstalk.bell.ca/en/.
According to Rankiteo, Bell’s AI-generated cybersecurity score is 771, reflecting their Fair security posture.
According to Rankiteo, Bell currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Bell has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
According to Rankiteo, Bell is not certified under SOC 2 Type 1.
According to Rankiteo, Bell does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Bell is not listed as GDPR compliant.
According to Rankiteo, Bell does not currently maintain PCI DSS compliance.
According to Rankiteo, Bell is not compliant with HIPAA regulations.
According to Rankiteo,Bell is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Bell operates primarily in the Telecommunications industry.
Bell employs approximately 33,894 people worldwide.
Bell presently has no subsidiaries across any sectors.
Bell’s official LinkedIn profile has approximately 363,183 followers.
Bell is classified under the NAICS code 517, which corresponds to Telecommunications.
No, Bell does not have a profile on Crunchbase.
Yes, Bell maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bell.
As of January 21, 2026, Rankiteo reports that Bell has experienced 2 cybersecurity incidents.
Bell has an estimated 9,783 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Detection and Response: The company detects and responds to cybersecurity incidents through an incident response plan activated with bell takes swift action to protect vulnerable systems., and law enforcement notified with the business has contacted the office of the privacy commissioner and has been closely collaborating with the rcmp cybercrime unit in its investigation...
Title: Bell Customer Data Breach
Description: Hackers have illegally obtained customer information, primarily subscriber names and e-mail addresses.
Type: Data Breach
Title: Bell Data Breach
Description: Bell suffered from a data breach incident that exposed 1.9 million customer e-mail addresses, and 700 names and phone numbers were illegally accessed. Financial, password or other sensitive personal information was not accessed. Bell takes swift action to protect vulnerable systems.
Type: Data Breach
Common Attack Types: The most common types of attacks the company has faced is Breach.

Data Compromised: Customer e-mail addresses, Subscriber names, Phone numbers

Data Compromised: 1.9 million customer e-mail addresses, 700 names and phone numbers
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Customer E-Mail Addresses, Subscriber Names, Phone Numbers, , Email Addresses, Names, Phone Numbers and .

Entity Name: Bell
Entity Type: Company
Industry: Telecommunications
Customers Affected: 100000

Entity Name: Bell
Entity Type: Telecommunications Company
Industry: Telecommunications
Customers Affected: 1.9 million customer e-mails, 700 names and phone numbers

Incident Response Plan Activated: Bell takes swift action to protect vulnerable systems.
Law Enforcement Notified: The business has contacted the Office of the Privacy Commissioner and has been closely collaborating with the RCMP cybercrime unit in its investigation.
Incident Response Plan: The company's incident response plan is described as Bell takes swift action to protect vulnerable systems..

Type of Data Compromised: Customer e-mail addresses, Subscriber names, Phone numbers
Number of Records Exposed: 1900000

Type of Data Compromised: Email addresses, Names, Phone numbers
Number of Records Exposed: 1.9 million email addresses, 700 names and phone numbers
Sensitivity of Data: Non-sensitive (no financial, password, or other sensitive personal information)
Personally Identifiable Information: NamesPhone numbers

Regulatory Notifications: The business has contacted the Office of the Privacy Commissioner.
Most Significant Data Compromised: The most significant data compromised in an incident were Customer e-mail addresses, Subscriber names, Phone numbers, , 1.9 million customer e-mail addresses, 700 names and phone numbers and .
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were 700 names and phone numbers, Subscriber names, 1.9 million customer e-mail addresses, Customer e-mail addresses and Phone numbers.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 1.9M.
.png)
SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler. Root causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g., execSync(`git show -s --format=%B ${commitHash}`)). Shell metacharacters are interpreted by the shell, enabling command execution. ImpactThis vulnerability is generally hard to exploit, as it requires --commit-hash to be attacker controlled. The vulnerability primarily affects CI/CD environments where `wrangler pages deploy` is used in automated pipelines and the --commit-hash parameter is populated from external, potentially untrusted sources. An attacker could exploit this to: * Run any shell command. * Exfiltrate environment variables. * Compromise the CI runner to install backdoors or modify build artifacts. Credits Disclosed responsibly by kny4hacker. Mitigation * Wrangler v4 users are requested to upgrade to Wrangler v4.59.1 or higher. * Wrangler v3 users are requested to upgrade to Wrangler v3.114.17 or higher. * Users on Wrangler v2 (EOL) should upgrade to a supported major version.
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.