What is the official website of CenturyLink ?

The official website of CenturyLink is http://www.centurylink.com.

What is CenturyLink's cybersecurity risk score?

CenturyLink has an AI-generated cybersecurity risk score of 765 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has CenturyLink experienced?

According to Rankiteo, CenturyLink currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CenturyLink been affected by any supply chain cyber incidents ?

According to Rankiteo, CenturyLink has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CenturyLink have SOC 2 Type 1 certification ?

According to Rankiteo, CenturyLink is not certified under SOC 2 Type 1.

Does CenturyLink have SOC 2 Type 2 certification ?

According to Rankiteo, CenturyLink does not hold a SOC 2 Type 2 certification.

Does CenturyLink comply with GDPR ?

According to Rankiteo, CenturyLink is not listed as GDPR compliant.

Does CenturyLink have PCI DSS certification ?

According to Rankiteo, CenturyLink does not currently maintain PCI DSS compliance.

Does CenturyLink comply with HIPAA ?

According to Rankiteo, CenturyLink is not compliant with HIPAA regulations.

Does CenturyLink have ISO 27001 certification ?

According to Rankiteo,CenturyLink is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CenturyLink operate in ?

CenturyLink operates primarily in the IT Services and IT Consulting industry.

How many employees does CenturyLink have ?

CenturyLink employs approximately 24,214 people worldwide.

Does CenturyLink own any subsidiaries ?

CenturyLink presently has no subsidiaries across any sectors.

How many LinkedIn followers does CenturyLink have ?

CenturyLink's official LinkedIn profile has approximately 230,947 followers.

What is the NAICS classification code for CenturyLink ?

CenturyLink is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does CenturyLink have a Crunchbase profile ?

No, CenturyLink does not have a profile on Crunchbase.

Does CenturyLink have a LinkedIn profile ?

Yes, CenturyLink maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/centurylink.

How many cybersecurity incidents has CenturyLink experienced ?

As of August 29, 2026, Rankiteo reports that CenturyLink has experienced 3 cybersecurity incidents.

How many peer or competitor companies does CenturyLink have ?

CenturyLink has an estimated 41,462 peer or competitor companies worldwide.

What types of cybersecurity incidents has CenturyLink faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Breach and Data Leak.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CenturyLink

Boost Score +25 with badge (5 left)

765

/1000

Fair

790

/1000

Fair

CenturyLink Vendor Cyber Rating & Cyber Score

centurylink.com

Add Your Compliance Badge

CenturyLink (NYSE: CTL) is a technology leader delivering hybrid networking, cloud connectivity, and security solutions to customers around the world. Through its extensive global fiber network, CenturyLink provides secure and reliable services to meet the growing digital demands of businesses and consumers. CenturyLink strives to be the trusted connection to the networked world and is focused on delivering technology that enhances the customer experience. Learn more at http://news.centurylink.com/.

CenturyLink A.I CyberSecurity Scoring

Scoring History

CenturyLink

CenturyLink CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

CenturyLink

Ransomware

03/2023

LUM33321023

CenturyLink

Breach

8/2020

LEV801082025

CenturyLink

Data Leak

10/2019

CEN32023423

Loading…

A.I.

CenturyLink Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CenturyLink

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for CenturyLink in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CenturyLink in 2026.

Incident Types CenturyLink vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for CenturyLink in 2026.

Incident History - CenturyLink (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CenturyLink Subsidiaries

CenturyLink

IT Services and IT Consulting

Website: http://www.centurylink.com

Company Size: 10,001+ employees

Lumen TechnologiesTelecommunications

Level 3 CommunicationsTelecommunications

tw telecomTelecommunications

CenturyLink Business for EnterpriseIT Services and IT Consulting

CenturyLink BusinessTelecommunications

SEAL Consulting IncIT Services and IT Consulting

Lumen Technologies Asia PacificIT Services and IT Consulting

Black Lotus LabsComputer and Network Security

Quantum FiberTechnology, Information and Internet

Lumen 中国信息技术和服务

Lumen Public SectorIT Services and IT Consulting

Lumen JapanITサービス・ITコンサルティング

Loading…

CenturyLink Similar Companies

Ingram Micro

ingrammicro.com

Ingram Micro is a leading technology company for the global information technology ecosystem. With the ability to reach nearly 90% of the global population, we play a vital role in the worldwide IT sales channel, bringing products and services from technology manufacturers and cloud providers to a highly diversified base of business-to-business technology experts. Through Ingram Micro Xvantage™, our AI-powered digital platform, we offer what we believe to be the industry’s first comprehensive business-to-consumer-like experience, integrating hardware and cloud subscriptions, personalized recommendations, instant pricing, order tracking, and billing automation. We also provide a broad range of technology services, including financing, specialized marketing, and lifecycle management, as well as technical pre- and post-sales professional support. Learn more at www.ingrammicro.com.

SoftwareOne

softwareone.com

SoftwareOne is a global software and cloud solutions provider. With a presence in over 70 countries and a team of around 13,000 professionals, we combine global scale and local expertise to help clients optimize costs, accelerate growth, and navigate complex IT environments with confidence. Leveraging deep capabilities in cloud, software, and data and AI, the company empowers organizations to modernize, innovate, and unlock the full value of their technology investments. Headquartered in Switzerland, SoftwareOne is listed on the SIX Swiss Exchange and Euronext Oslo Børs under the ticker symbol SWON. Visit us: https://www.softwareone.com/en

CDW

cb cdw.com

At CDW, we know how to make technology work so people can do great things. Our experts bring a full-stack, full-lifestyle approach with custom solutions, services and relationships to bring your vision to life. Through decades of experience, scale, and deep industry expertise, we deliver the full promise of what technology can do to help you reach your goals and drive innovation. Partner with CDW, and together, let’s Make amazing happen. A Fortune 500 company and member of the S&P 500 Index, CDW helps its customers to navigate an increasingly complex IT market and maximize return on their technology investments. For more information about CDW, please visit www.CDW.com.

Asurion

cb asurion.com

As the world’s leading tech care company, Asurion eliminates the fears and frustrations associated with technology, to ensure our 300 million customers get the most out of their devices, appliances and connections. We provide insurance, repair, replacement, installation and 24/7 support for everything from cellphones to laptops and household appliances. Our experts are available online, on the phone, at one of our more than 800 stores, or can even come to you.

Indra

cb indragroup.com

Indra Group (https://www.indragroup.com/) is the foremost Spanish multinational and one of the leading European companies that focus on defence and advanced technologies. It stands at the forefront of the defence, space, air traffic management, mobility, and Information Technology businesses through Minsait, and it integrates its sovereign AI, cybersecurity and cyberdefence capabilities into IndraMind. Indra Group is paving the way to a more secure and better-connected future through innovative solutions, trusted relationships and the very best talent. Sustainability is an integral part of its strategy and culture in order to overcome current and future social and environmental challenges. At the close of the 2024 financial year, Indra Group posted revenues of €4.843 billion and had a local presence in 46 countries and business operations in over 140 countries.

Globant

cb globant.link

At Globant, we create the digitally-native products that people love. We bridge the gap between businesses and consumers through technology and creativity, leveraging our experience as an AI powerhouse. We dare to digitally transform organizations and strive to delight their customers. - We have more than 30,000 employees and are present in 33 countries across 5 continents, working for companies like Google, Electronic Arts, and Santander, among others. - We were named a Worldwide Leader in AI Services (2023) and a Worldwide Leader in CX Improvement Services (2020) by IDC MarketScape report. - We are the fastest-growing IT brand and the 5th strongest IT brand globally (2024), according to Brand Finance. - We were featured as a business case study at Harvard, MIT, and Stanford. - We are active members of The Green Software Foundation (GSF) and the Cybersecurity Tech Accord. For more information, visit https://bit.ly/globant_com Follow us: http://www.twitter.com/globant http://www.youtube.com/Globant http://www.facebook.com/Globant https://instagram.com/Globant https://www.tiktok.com/@globant

Sutherland

sutherlandglobal.com

Artificial Intelligence. Automation. Cloud Engineering. Advanced Analytics. For Enterprises, these are key factors of success. For us, they’re our core expertise. We work with global iconic brands. We bring them a unique value proposition through market-leading technologies and business process excellence. At the heart of it all is Digital Engineering services – the foundation that powers rapid innovation and scalable business transformation. We’ve created 363 unique and independent inventions, 250 of which are AI-based and rolled up under several patent grants in critical technologies. Leveraging our advanced products and platforms, we drive digital transformation at scale, optimize critical business operations, reinvent experiences, and pioneer new solutions, all provided through a seamless “as-a-service” model. For each company, we provide new keys for their businesses, the people they work with, and the customers they serve. With proven strategies and agile execution, we don’t just enable change — we engineer digital outcomes.

Swisscom

swisscom.ch

As No. 1, we inspire people in the connected world. With the latest technologies and innovations, together we have the opportunity to shape the future. To do this, we are and act trustworthy, committed and curious. Are you with us? Join us on this exciting journey and work with us or in one of the DevOps Centres in Riga or Rotterdam in different business areas on the latest technological trends. Find out more about us and our vacancies on our careers page: www.swisscom.ch/career We look forward to hearing from you!

Capita

capita.com

Capita is an outsourcer, helping clients across the public and private sectors run complex business processes more efficiently, creating better consumer experiences. Operating across eight countries, Capita’s 34,000 colleagues support primarily UK and European clients with people-based services underpinned by market-leading technology. We’re a vital support service for our clients, enabling the everyday interactions that we expect to run seamlessly, to run seamlessly. A publicly listed business with adjusted revenue of £2.4bn, Capita’s areas of focus are Central Government, Local Public Service, Defence, Learning, Fire & Security, Contact Centres and Pensions Solutions. We’re embracing change to respond to the ever-changing needs of society, creating better outcomes for all our stakeholders.

Loading…

NEWS

CenturyLink CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 07, 2026 08:00 AM

One million customers on alert as extortion group claims massive Brightspeed data haul

The Crimson Collective claims to have stolen data on more than a million Brightspeed customers. The broadband provider is investigating.

Read Article

January 05, 2026 08:00 AM

25 Best Managed Security Service Providers (MSSP) In 2026

Managed Security Service Providers (MSSPs) specialize in outsourced cyber defense, shielding firms from relentless threats.

Read Article

October 31, 2025 07:00 AM

US telco confirms hackers breached systems in stealthy state-backed cyber campaign – and remained undetected for nearly a year

State-sponsored hackers breached the systems of US telecoms services firm Ribbon Communications, and stayed undetected for nearly a year.

Read Article

October 31, 2025 07:00 AM

Telecom provider Ribbon Communications reports nation-state hack

Cyberattack on the telecom supply chain compared to May 2021 Colonial pipeline attack.

Read Article

October 31, 2025 07:00 AM

Lumen Technologies (LUMN) Q3 2025 Earnings Call Transcript

The company changed its name from CenturyLink to Lumen Technologies in 2020 and now operates under the Lumen, Quantum Fiber, CenturyLink,...

Read Article

October 29, 2025 07:00 AM

Major telecom supplier compromised by unnamed nation-state attackers

Nation-state snoops broke into Ribbon Communications – an outfit that provides software and networking gear to Verizon, CenturyLink,...

Read Article

October 27, 2025 07:00 AM

DCM Services Names Curtis Rebelein as Chief Information Security Officer

Rebelein will lead efforts to fortify DCM Services' security posture, regulatory compliance, and risk management strategies.

Read Article

August 18, 2025 07:00 AM

Why Clearance Holders Get Rejected for Jobs – Even When They Have the Right Skills

Sometimes the biggest setbacks in a cleared job search come down to the smallest details. Stephanie Holman, a technical recruiter at...

Read Article

July 23, 2025 07:00 AM

Cloudflare report reveals surge in internet shutdowns & outages

Cloudflare's Q2 2025 report reveals a sharp rise in global internet shutdowns from government actions, outages, cable damage and...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55867

SUMMARY

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.revokeToken() in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERS_TOKENREMOVE permission against the attacker-controlled userId path parameter before resolving the token selected by idOrToken. An authenticated user can provide an authorized userId while accessTokenService.loadById() or accessTokenService.load() resolves a token belonging to another user, including a service account or administrator, after which accessTokenService.destroy() deletes that token without checking AccessToken.getUserName(). The issue does not expose token contents, but unauthorized deletion causes integrity impact and can disrupt access-token-based integrations. This issue is fixed in versions 6.3.12, 7.0.7, and 7.1.2.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55860

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a secure connection. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest naming mysql_clear_password or dialog (PAM) over a plain-TCP unencrypted connection, and AuthenticationFlow permits ClearPasswordPluginFlow or PamPluginFlow to return the user's password as cleartext bytes on the wire. The disclosed credentials can subsequently be used to authenticate directly to the database server. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55859

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to character_set_client through the OK-packet session-state-tracking mechanism, including through SET NAMES executed by a stored routine or trigger, server configuration, or a hostile or man-in-the-middle server. If the new character set is not UTF-8, the driver continues to exchange UTF-8 while the server interprets the same bytes under a different encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value raises R2dbcNonTransientResourceException with SQLState 08000 and closes the connection. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55858

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55857

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysql_clear_password plugin is gated behind a secure transport, but the sibling PAM handler SendPamAuthPacketFactory, named dialog by the server, does not declare that requirement and inherits the default secure-required value false; older branches implement the same affected behavior in SendPamAuthPacket. A hostile or man-in-the-middle server can send an Authentication Switch Request for dialog over plain TCP, causing the driver to return the user's password in cleartext when sslMode=DISABLE and restrictedAuth=null, which is the default configuration. Properly verified TLS and local Unix sockets are not exposed to this transport vector. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…