Company Details
firstrepublic
125
11,686
52
chase.com
0
FIR_1016452
In-progress


First Republic Private Wealth Management Company CyberSecurity Posture
chase.comFirst Republic is now part of JPMorgan Chase. Our commitment to provide extraordinary client service has not changed. Our mission continues to be understanding your individual needs and responding with personalized solutions. Our service model is now backed by the strength and stability of JPMorgan Chase, an institution that has been a leader in financial services for more than 200 years. See full social media terms and conditions at chase.com/socialterms.
Company Details
firstrepublic
125
11,686
52
chase.com
0
FIR_1016452
In-progress
Between 750 and 799

FRPWM Global Score (TPRM)XXXX

Description: The California Office of the Attorney General reported a data breach involving First Republic Bank on August 14, 2012. The breach occurred on August 2, 2012, due to improper data disposal of client names, account types and numbers, and taxpayer identification/social security numbers. The number of affected individuals is unknown.


No incidents recorded for First Republic Private Wealth Management in 2026.
No incidents recorded for First Republic Private Wealth Management in 2026.
No incidents recorded for First Republic Private Wealth Management in 2026.
FRPWM cyber incidents detection timeline including parent company and subsidiaries

First Republic is now part of JPMorgan Chase. Our commitment to provide extraordinary client service has not changed. Our mission continues to be understanding your individual needs and responding with personalized solutions. Our service model is now backed by the strength and stability of JPMorgan Chase, an institution that has been a leader in financial services for more than 200 years. See full social media terms and conditions at chase.com/socialterms.

We aspire to be the world’s most exceptional financial institution, united by our shared values of partnership, client service, integrity, and excellence. Operating at the center of capital markets, we act as one firm, mobilizing our people, capital, and ideas to deliver superior results across ou

Angel One Limited is a Fintech company providing broking services, margin trading facility, research services, depository services, investment education and distribution of third-party financial products to its clients, on a mission to become the No. 1 fintech organization in India. With about 32 mi
Sun Life is a leading financial services organization dedicated to helping people achieve lifetime financial security and live healthier lives. We provide a wide range of insurance and investment products and services in key markets around the world including Canada, the United States, the United K
HDB Financial Services (HDBFS) is a leading Non-Banking Financial Company (NBFC) that caters to the growing needs of an Aspirational India, serving both Individual & Business Clients The lines of business include - Lending and BPO Services. Incorporated in 2007, HDB is a well-established business wi
At State Street, we deliver leading investment platforms, data, expertise, and solutions that accelerate performance and better decision making. With over 200 years of global financial leadership, we equip institutional investors through a comprehensive suite of capabilities: Investment Services: I

From the largest cities to the smallest villages, India is filled with ambition and enterprise. As Indians from all walks of life set out to write their growth story, our timely and affordable credit empowers them to bring their dreams alive. As part of the TVS Group, we empower Indians from vario

With a history tracing its roots to 1799 in New York City, JPMorganChase is one of the world's oldest, largest, and best-known financial institutions—carrying forth the innovative spirit of our heritage firms in global operations across 100 markets. We serve millions of customers and many of the w

We support you over time, during expansion phases and their more challenging periods alike. By providing a full range of solutions suited to your needs, we play a facilitating role to help you realise your ambitions and leverage your potential. This is why we intend to develop an authentic advisory

ICE (NYSE: ICE) connects people to data, technology and expertise that create opportunity and inspire innovation. For terms of use, visit www.ice.co
.png)
Flagstar Private Bank and Wealth Management, the private banking division of Flagstar Bank, N.A. (NYSE: FLG), today announced as part of its...
Sandro Wealth, a private wealth firm that partners with elite financial advisors to help them win and retain high net-worth clients,...
Today, Mastercard is hosting the first European edition of its multi-sector Cyber Defense Exercise (CDX) at the European Cyber Resilience...
JPMorgan Chase is adding a dedicated offering for single-digit millionaires to dozens of bank branches, the latest effort to boost wealth...
WealthBriefing provides news, features and information for the wealth management and private banking industries.In-depth industry profiles...
A roundup of moves, appointments and personnel changes in North America's wealth sector during June. Big changes included the confirmation...
F2 Strategy co-founder Doug Fritz discusses how the best advisory businesses utilize technology to create efficiencies and deliver a better client...
Ashton Thomas Private Wealth, a registered investment advisor acquired by Arax Investment Partners in 2023, has recruited a San Francisco-based team of...
JPMorgan is set to unveil 14 new format branches — each acquired when JPMorgan took over First Republic in 2023 — in tony ZIP codes in New...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of First Republic Private Wealth Management is https://www.firstrepublic.com/.
According to Rankiteo, First Republic Private Wealth Management’s AI-generated cybersecurity score is 751, reflecting their Fair security posture.
According to Rankiteo, First Republic Private Wealth Management currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, First Republic Private Wealth Management has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
According to Rankiteo, First Republic Private Wealth Management is not certified under SOC 2 Type 1.
According to Rankiteo, First Republic Private Wealth Management does not hold a SOC 2 Type 2 certification.
According to Rankiteo, First Republic Private Wealth Management is not listed as GDPR compliant.
According to Rankiteo, First Republic Private Wealth Management does not currently maintain PCI DSS compliance.
According to Rankiteo, First Republic Private Wealth Management is not compliant with HIPAA regulations.
According to Rankiteo,First Republic Private Wealth Management is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
First Republic Private Wealth Management operates primarily in the Financial Services industry.
First Republic Private Wealth Management employs approximately 125 people worldwide.
First Republic Private Wealth Management presently has no subsidiaries across any sectors.
First Republic Private Wealth Management’s official LinkedIn profile has approximately 11,686 followers.
First Republic Private Wealth Management is classified under the NAICS code 52, which corresponds to Finance and Insurance.
No, First Republic Private Wealth Management does not have a profile on Crunchbase.
Yes, First Republic Private Wealth Management maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/firstrepublic.
As of January 21, 2026, Rankiteo reports that First Republic Private Wealth Management has experienced 1 cybersecurity incidents.
First Republic Private Wealth Management has an estimated 30,812 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Title: First Republic Bank Data Breach
Description: The California Office of the Attorney General reported a data breach involving First Republic Bank on August 14, 2012. The breach occurred on August 2, 2012, due to improper data disposal of client names, account types and numbers, and taxpayer identification/social security numbers. The number of affected individuals is unknown.
Date Detected: 2012-08-02
Date Publicly Disclosed: 2012-08-14
Type: Data Breach
Attack Vector: Improper Data Disposal
Vulnerability Exploited: Improper Data Disposal
Common Attack Types: The most common types of attacks the company has faced is Breach.

Data Compromised: Client names, Account types and numbers, Taxpayer identification/social security numbers
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Client Names, Account Types And Numbers, Taxpayer Identification/Social Security Numbers and .

Entity Name: First Republic Bank
Entity Type: Bank
Industry: Financial Services
Location: California

Type of Data Compromised: Client names, Account types and numbers, Taxpayer identification/social security numbers
Sensitivity of Data: High

Source: California Office of the Attorney General
Date Accessed: 2012-08-14
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney GeneralDate Accessed: 2012-08-14.

Root Causes: Improper Data Disposal
Most Recent Incident Detected: The most recent incident detected was on 2012-08-02.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2012-08-14.
Most Significant Data Compromised: The most significant data compromised in an incident were Client names, Account types and numbers, Taxpayer identification/social security numbers and .
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Taxpayer identification/social security numbers, Client names and Account types and numbers.
Most Recent Source: The most recent source of information about an incident is California Office of the Attorney General.
.png)
SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler. Root causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g., execSync(`git show -s --format=%B ${commitHash}`)). Shell metacharacters are interpreted by the shell, enabling command execution. ImpactThis vulnerability is generally hard to exploit, as it requires --commit-hash to be attacker controlled. The vulnerability primarily affects CI/CD environments where `wrangler pages deploy` is used in automated pipelines and the --commit-hash parameter is populated from external, potentially untrusted sources. An attacker could exploit this to: * Run any shell command. * Exfiltrate environment variables. * Compromise the CI runner to install backdoors or modify build artifacts. Credits Disclosed responsibly by kny4hacker. Mitigation * Wrangler v4 users are requested to upgrade to Wrangler v4.59.1 or higher. * Wrangler v3 users are requested to upgrade to Wrangler v3.114.17 or higher. * Users on Wrangler v2 (EOL) should upgrade to a supported major version.
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.