Company Details
florida-international-university
12,457
392,270
6113
fiu.edu
0
FLO_2021007
In-progress

Florida International University Company CyberSecurity Posture
fiu.eduFIU is Miami's public research university. Offering bachelor's, master's and doctoral degrees, both on campus and fully online. Designated a Preeminent State Research University, FIU emphasizes research as a major component in the university's mission. For more than 50 years, FIU has positioned itself as one of South Florida's anchor institutions by solving some of the greatest challenges of our time. We are dedicated to enriching the lives of the local and global community. With a student body of more than 56,000, we are among the largest universities in the nation and have collectively graduated more than 300,000 alumni, 165,000 of whom live and work in South Florida.
Company Details
florida-international-university
12,457
392,270
6113
fiu.edu
0
FLO_2021007
In-progress
Between 700 and 749

FIU Global Score (TPRM)XXXX

Description: Florida International University was targeted by the BlackCat ransomware gang in April 2022. The BlackCat, also known as ALPHV stole about 1.2TB of data from FIU including accounting documents, contracts, email databases, and Social Security numbers. The university notified the impacted staff and the students of the breach.


No incidents recorded for Florida International University in 2025.
No incidents recorded for Florida International University in 2025.
No incidents recorded for Florida International University in 2025.
FIU cyber incidents detection timeline including parent company and subsidiaries

FIU is Miami's public research university. Offering bachelor's, master's and doctoral degrees, both on campus and fully online. Designated a Preeminent State Research University, FIU emphasizes research as a major component in the university's mission. For more than 50 years, FIU has positioned itself as one of South Florida's anchor institutions by solving some of the greatest challenges of our time. We are dedicated to enriching the lives of the local and global community. With a student body of more than 56,000, we are among the largest universities in the nation and have collectively graduated more than 300,000 alumni, 165,000 of whom live and work in South Florida.


The University of Texas at Austin is one of the largest public universities in the United States. Founded in 1883, the University has grown from a single building, eight teachers, two departments and 221 students to a 350-acre main campus with 21,000 faculty and staff, 16 colleges and schools and mo

In achievement and prestige, the University of Wisconsin–Madison has long been recognized as one of America's great universities. A public, land-grant institution, UW–Madison offers a complete spectrum of liberal arts studies, professional programs and student activities. Spanning 936 acres along th

With more than 34,000 students and 7,000 faculty and staff, North Carolina State University is a comprehensive university known for its leadership in education and research, and globally recognized for its science, technology, engineering and mathematics leadership. NC State students, faculty and

The University of Alabama is a student-centered research university and an academic community committed to enhancing the quality of life for all through breakthrough research. Founded in 1831 as Alabama's first public college, The University of Alabama is dedicated to excellence in teaching, resea

With four campuses in Massachusetts, Tufts is a research university committed to helping students and faculty generate bold ideas, innovate, and become active citizens of the world. Tufts' unique combination of research and liberal arts attracts students, faculty, and staff who thrive in an environm

Washington State University is a nationally recognized land-grant research university, founded in Pullman in 1890. WSU’s statewide system includes campuses in Pullman, Spokane, Everett, Tri-Cities and Vancouver, with extension and research offices in every county of the state, and a nationally ranke

KU is a major comprehensive research and teaching university and a center for learning, scholarship, and creative endeavor. KU is the only Kansas Regents university to hold membership in the prestigious Association of American Universities (AAU), a select group of public and private research univers

George Mason University is Virginia’s largest and most diverse public research university. Located near Washington, D.C., Mason enrolls more than 40,000 students from 130 countries and 50 states, and has a residential population of more than 6,000 students. Mason has grown rapidly over the past half

University of Waterloo is a leader in innovation that drives economic and social prosperity for Canada and the world. We are home to a renowned talent pipeline, game-changing research and technology, and unmatched entrepreneurial culture, that together create solutions to tackle today’s and tomorrow
.png)
FIU experts offer insights on supply chain disruptions, cybersecurity, marketing trends and consumer behavior for Black Friday and Cyber...
In an era where drones are integral to everything from package delivery to infrastructure inspections, the threat of cyberattacks looms...
FIU scientists develop SHIELD, a self-healing system that detects and recovers drones from cyberattacks in real time.
The University of West Florida (UWF) has secured a $ 9.6 million federal grant to enhance cybersecurity research at its Panhandle campus.
The University of West Florida Center for Cybersecurity has been awarded a $9.6 million grant from the U.S. Department of War CIO Cyber...
Real-time recovery could set a new standard for drone safety, protecting billions of dollars in assets and public trust as unmanned aircraft...
FIU cybersecurity researchers developed SHIELD, a real-time defense system against drone hijacking. The research team from L-R: PhD...
As drones proliferate in various sectors across the United States—including delivery services, infrastructure inspections, and agricultural...
As drones increasingly populate U.S. skies for tasks ranging from package delivery to infrastructure inspection, the threat of cyberattacks...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Florida International University is http://www.fiu.edu.
According to Rankiteo, Florida International University’s AI-generated cybersecurity score is 747, reflecting their Moderate security posture.
According to Rankiteo, Florida International University currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Florida International University is not certified under SOC 2 Type 1.
According to Rankiteo, Florida International University does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Florida International University is not listed as GDPR compliant.
According to Rankiteo, Florida International University does not currently maintain PCI DSS compliance.
According to Rankiteo, Florida International University is not compliant with HIPAA regulations.
According to Rankiteo,Florida International University is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Florida International University operates primarily in the Higher Education industry.
Florida International University employs approximately 12,457 people worldwide.
Florida International University presently has no subsidiaries across any sectors.
Florida International University’s official LinkedIn profile has approximately 392,270 followers.
Florida International University is classified under the NAICS code 6113, which corresponds to Colleges, Universities, and Professional Schools.
No, Florida International University does not have a profile on Crunchbase.
Yes, Florida International University maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/florida-international-university.
As of November 27, 2025, Rankiteo reports that Florida International University has experienced 1 cybersecurity incidents.
Florida International University has an estimated 14,032 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.
Detection and Response: The company detects and responds to cybersecurity incidents through an communication strategy with notified impacted staff and students..
Title: Florida International University Ransomware Attack
Description: Florida International University was targeted by the BlackCat ransomware gang in April 2022. The BlackCat, also known as ALPHV stole about 1.2TB of data from FIU including accounting documents, contracts, email databases, and Social Security numbers. The university notified the impacted staff and the students of the breach.
Date Detected: 2022-04-01
Type: Ransomware
Threat Actor: BlackCat (ALPHV)
Common Attack Types: The most common types of attacks the company has faced is Ransomware.

Data Compromised: Accounting documents, Contracts, Email databases, Social security numbers
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Accounting Documents, Contracts, Email Databases, Social Security Numbers and .

Entity Name: Florida International University
Entity Type: Educational Institution
Industry: Education
Location: Florida, USA

Communication Strategy: Notified impacted staff and students

Type of Data Compromised: Accounting documents, Contracts, Email databases, Social security numbers
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Notified impacted staff and students.
Last Attacking Group: The attacking group in the last incident was an BlackCat (ALPHV).
Most Recent Incident Detected: The most recent incident detected was on 2022-04-01.
Most Significant Data Compromised: The most significant data compromised in an incident were accounting documents, contracts, email databases, Social Security numbers and .
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Social Security numbers, accounting documents, contracts and email databases.
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.