FPCBG
Company Details
Linkedin ID:
franklin-park-conservatory
Website:
Employees number:
143
Number of followers:
5,154
NAICS:
712
Industry Type:
Homepage:
fpconservatory.org
IP Addresses:
0
Company ID:
FRA_1865479
Scan Status:
In-progress
Franklin Park Conservatory and Botanical Gardens Company CyberSecurity Posture
fpconservatory.org
Franklin Park Conservatory and Botanical Gardens is a premier botanical landmark and cultural attraction featuring exceptional plant collections and gardens, seasonal art- and nature-based exhibitions, and a dynamic array of educational opportunities and special events for visitors of all ages.
Franklin Park Conservatory and Botanical Gardens A.I CyberSecurity Scoring
FPCBG Risk Score (AI oriented)Between 700 and 749
FPCBG
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
FPCBG Global Score (TPRM)XXXX
FPCBG
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
FPCBG Company CyberSecurity News & History
Past Incidents
2
Attack Types
1
Franklin Park Conservatory and Botanical Gardens
Breach
Rankiteo Explanation
Attack limited on finance or reputation
Description: The Maine Attorney General's Office reported a data breach involving Franklin Park Conservatory and Botanical Gardens on January 4, 2022. The breach occurred between July 16, 2021, and July 21, 2021, potentially affecting one Maine resident's name, financial account number, and routing number. The Conservatory provided access to credit monitoring services for one year to the affected individual.
Franklin Park Conservatory and Botanical Gardens
Breach
Rankiteo Explanation
Attack with significant impact with customers data leaks
Description: Franklin Park Conservatory was targeted in a data breach incident after a ransomware attack in July 2021. The breach compromised the personal information including financial accounts and card numbers of about 4,927 people. The Conservatory started investigations with third-party forensic specialists to restore the systems and offered credit monitoring to the affected persons.
FPCBG Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for FPCBG
Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)
No incidents recorded for Franklin Park Conservatory and Botanical Gardens in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for Franklin Park Conservatory and Botanical Gardens in 2025.
Incident Types FPCBG vs Museums, Historical Sites, and Zoos Industry Avg (This Year)
No incidents recorded for Franklin Park Conservatory and Botanical Gardens in 2025.
Incident History — FPCBG (X = Date, Y = Severity)
FPCBG cyber incidents detection timeline including parent company and subsidiaries
FPCBG Company Subsidiaries
Franklin Park Conservatory and Botanical Gardens is a premier botanical landmark and cultural attraction featuring exceptional plant collections and gardens, seasonal art- and nature-based exhibitions, and a dynamic array of educational opportunities and special events for visitors of all ages.
Loading...
FPCBG Similar Companies
The Bronx Museum
For over five decades, The Bronx Museum of the Arts has been a vanguard of cultural diversity and accessibility in the contemporary art world. The Museum offers 100% free admission for everyone to all its exhibitions and programs, providing a vital creative outlet to the public. Through its curatori
The Museum of Russian Art
The Museum of Russian Art collects, preserves, exhibits, and illuminates the rich artistic tapestry of Russia, past and present, through outstanding exhibitions and public programs for all audiences. The Museum upholds an independent voice and the freedom of expression to carry out its mission unco
Museum of Wisconsin Art
The Museum of Wisconsin Art (MOWA) explores the art and culture of Wisconsin. Founded in 1961, MOWA is one of the top museums of regional art in the United States, with almost 5,000 works of contemporary and historic art by more than 350 artists. Through rotating exhibitions and educational programs
Museum Barberini
Sammeln, forschen, präsentieren, vermitteln und begeistern – dies sind die Anliegen des Museums Barberini. Neben der Sammlung Hasso Plattner zeigt es bis zu drei Ausstellungen im Jahr, oft in Kooperation mit internationalen Partnern. Ob Pablo Picasso, Vincent van Gogh, Rembrandt oder Gerhard Richter
The Courtauld Institute of Art
The Courtauld works to advance how we see and understand the visual arts, as an internationally-renowned centre for the teaching, research of art history and a major public gallery. Founded in 1932, the organisation has been at the forefront of the study of art ever since. The Courtauld cares for
Columbia Gorge Discovery Center & Museum
OUR MISSION The Mission of the Columbia Gorge Discovery Center & Museum is to inspire appreciation and stewardship of the Columbia River Gorge and Wasco County through collection, preservation, and interpretation of cultural and natural history resources. OUR FACILITY The building is a 48,200 sq.
.png)
FPCBG CyberSecurity News
November 20, 2025 08:00 AM
Things to do in central Ohio for Nov. 20-23, 2025
COLUMBUS, Ohio (WCMH) — Central Ohio's weekend lineup ushers in the holiday season with a mix of stage productions, concerts and...
June 10, 2025 07:00 AM
6 Weekend Trips in Ohio to Explore the Gorgeous Midwestern Terrain
Looking for a relaxing getaway? Here are six weekend trips in Ohio that showcase what this midwestern state has to offer.
November 27, 2024 08:00 AM
Annual gingerbread competition and display returns for holiday season
COLUMBUS, Ohio (WCMH) – It's time for the best gingerbread bakers and builders to go head to head in an annual competition.
October 14, 2024 07:00 AM
What’s Up: Halloween activities in and around Columbus
This time of year brings a multitude of Halloween-themed events and experiences, ranging from haunted houses to family-friendly costume parties.
July 23, 2021 07:00 AM
Columbus City Schools' retooled 'Summer Experience' more hands-on
In the Children's Garden at the Franklin Park Conservatory and Botanical Gardens Wednesday morning, young students could be seen running...
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
FPCBG CyberSecurity History Information
Official Website of Franklin Park Conservatory and Botanical Gardens
The official website of Franklin Park Conservatory and Botanical Gardens is http://www.fpconservatory.org.
Franklin Park Conservatory and Botanical Gardens’s AI-Generated Cybersecurity Score
According to Rankiteo, Franklin Park Conservatory and Botanical Gardens’s AI-generated cybersecurity score is 704, reflecting their Moderate security posture.
How many security badges does Franklin Park Conservatory and Botanical Gardens’ have ?
According to Rankiteo, Franklin Park Conservatory and Botanical Gardens currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does Franklin Park Conservatory and Botanical Gardens have SOC 2 Type 1 certification ?
According to Rankiteo, Franklin Park Conservatory and Botanical Gardens is not certified under SOC 2 Type 1.
Does Franklin Park Conservatory and Botanical Gardens have SOC 2 Type 2 certification ?
According to Rankiteo, Franklin Park Conservatory and Botanical Gardens does not hold a SOC 2 Type 2 certification.
Does Franklin Park Conservatory and Botanical Gardens comply with GDPR ?
According to Rankiteo, Franklin Park Conservatory and Botanical Gardens is not listed as GDPR compliant.
Does Franklin Park Conservatory and Botanical Gardens have PCI DSS certification ?
According to Rankiteo, Franklin Park Conservatory and Botanical Gardens does not currently maintain PCI DSS compliance.
Does Franklin Park Conservatory and Botanical Gardens comply with HIPAA ?
According to Rankiteo, Franklin Park Conservatory and Botanical Gardens is not compliant with HIPAA regulations.
Does Franklin Park Conservatory and Botanical Gardens have ISO 27001 certification ?
According to Rankiteo,Franklin Park Conservatory and Botanical Gardens is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of Franklin Park Conservatory and Botanical Gardens
Franklin Park Conservatory and Botanical Gardens operates primarily in the Museums, Historical Sites, and Zoos industry.
Number of Employees at Franklin Park Conservatory and Botanical Gardens
Franklin Park Conservatory and Botanical Gardens employs approximately 143 people worldwide.
Subsidiaries Owned by Franklin Park Conservatory and Botanical Gardens
Franklin Park Conservatory and Botanical Gardens presently has no subsidiaries across any sectors.
Franklin Park Conservatory and Botanical Gardens’s LinkedIn Followers
Franklin Park Conservatory and Botanical Gardens’s official LinkedIn profile has approximately 5,154 followers.
NAICS Classification of Franklin Park Conservatory and Botanical Gardens
Franklin Park Conservatory and Botanical Gardens is classified under the NAICS code 712, which corresponds to Museums, Historical Sites, and Similar Institutions.
Franklin Park Conservatory and Botanical Gardens’s Presence on Crunchbase
No, Franklin Park Conservatory and Botanical Gardens does not have a profile on Crunchbase.
Franklin Park Conservatory and Botanical Gardens’s Presence on LinkedIn
Yes, Franklin Park Conservatory and Botanical Gardens maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/franklin-park-conservatory.
Cybersecurity Incidents Involving Franklin Park Conservatory and Botanical Gardens
As of December 06, 2025, Rankiteo reports that Franklin Park Conservatory and Botanical Gardens has experienced 2 cybersecurity incidents.
Number of Peer and Competitor Companies
Franklin Park Conservatory and Botanical Gardens has an estimated 2,142 peer or competitor companies worldwide.
What types of cybersecurity incidents have occurred at Franklin Park Conservatory and Botanical Gardens ?
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
How does Franklin Park Conservatory and Botanical Gardens detect and respond to cybersecurity incidents ?
Detection and Response: The company detects and responds to cybersecurity incidents through an third party assistance with forensic specialists, and communication strategy with offered credit monitoring to affected persons..
Incident Details
Can you provide details on each incident ?
Title: Franklin Park Conservatory Data Breach and Ransomware Attack
Description: Franklin Park Conservatory was targeted in a data breach incident after a ransomware attack in July 2021. The breach compromised the personal information including financial accounts and card numbers of about 4,927 people. The Conservatory started investigations with third-party forensic specialists to restore the systems and offered credit monitoring to the affected persons.
Type: Data Breach
Title: Data Breach at Franklin Park Conservatory and Botanical Gardens
Description: The Maine Attorney General's Office reported a data breach involving Franklin Park Conservatory and Botanical Gardens on January 4, 2022. The breach occurred between July 16, 2021, and July 21, 2021, potentially affecting one Maine resident's name, financial account number, and routing number. The Conservatory provided access to credit monitoring services for one year to the affected individual.
Date Detected: 2022-01-04
Date Publicly Disclosed: 2022-01-04
Type: Data Breach
What are the most common types of attacks the company has faced ?
Common Attack Types: The most common types of attacks the company has faced is Breach.
Impact of the Incidents
What was the impact of each incident ?
Incident : Data Breach FRA11542422
Data Compromised: Personal information, Financial accounts, Card numbers
Incident : Data Breach FRA842072725
Data Compromised: Name, Financial account number, Routing number
What types of data are most commonly compromised in incidents ?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personal Information, Financial Accounts, Card Numbers, , Name, Financial Account Number, Routing Number and .
Which entities were affected by each incident ?
Incident : Data Breach FRA11542422
Entity Name: Franklin Park Conservatory
Entity Type: Non-Profit Organization
Industry: Recreation and Leisure
Customers Affected: 4927
Incident : Data Breach FRA842072725
Entity Name: Franklin Park Conservatory and Botanical Gardens
Entity Type: Non-profit Organization
Industry: Botanical Gardens
Location: Columbus, Ohio
Customers Affected: 1
Response to the Incidents
What measures were taken in response to each incident ?
Incident : Data Breach FRA11542422
Third Party Assistance: Forensic Specialists.
Communication Strategy: Offered Credit Monitoring to Affected Persons
How does the company involve third-party assistance in incident response ?
Third-Party Assistance: The company involves third-party assistance in incident response through Forensic Specialists, .
Data Breach Information
What type of data was compromised in each breach ?
Incident : Data Breach FRA11542422
Type of Data Compromised: Personal information, Financial accounts, Card numbers
Number of Records Exposed: 4927
Incident : Data Breach FRA842072725
Type of Data Compromised: Name, Financial account number, Routing number
Number of Records Exposed: 1
Sensitivity of Data: High
References
Where can I find more information about each incident ?
Where can stakeholders find additional resources on cybersecurity best practices ?
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Maine Attorney General's OfficeDate Accessed: 2022-01-04.
Investigation Status
How does the company communicate the status of incident investigations to stakeholders ?
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Offered Credit Monitoring To Affected Persons.
Post-Incident Analysis
What is the company's process for conducting post-incident analysis ?
Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as Forensic Specialists, .
Additional Questions
Incident Details
What was the most recent incident detected ?
Most Recent Incident Detected: The most recent incident detected was on 2022-01-04.
What was the most recent incident publicly disclosed ?
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2022-01-04.
Impact of the Incidents
What was the most significant data compromised in an incident ?
Most Significant Data Compromised: The most significant data compromised in an incident were Personal Information, Financial Accounts, Card Numbers, , name, financial account number, routing number and .
Response to the Incidents
What third-party assistance was involved in the most recent incident ?
Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was forensic specialists, .
Data Breach Information
What was the most sensitive data compromised in a breach ?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were name, Card Numbers, routing number, Financial Accounts, Personal Information and financial account number.
What was the number of records exposed in the most significant breach ?
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 500.0.
References
What is the most recent source of information about an incident ?
Most Recent Source: The most recent source of information about an incident is Maine Attorney General's Office.
.png)
Latest Global CVEs (Not Company-Specific)
Description
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.4, some of HedgeDoc's OAuth2 endpoints for social login providers such as Google, GitHub, GitLab, Facebook or Dropbox lack CSRF protection, since they don't send a state parameter and verify the response using this parameter. This vulnerability is fixed in 1.10.4.
Risk Information
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Description
Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.
Risk Information
cvss4
Base: 9.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A vulnerability was detected in xerrors Yuxi-Know up to 0.4.0. This vulnerability affects the function OtherEmbedding.aencode of the file /src/models/embed.py. Performing manipulation of the argument health_url results in server-side request forgery. The attack can be initiated remotely. The exploit is now public and may be used. The patch is named 0ff771dc1933d5a6b78f804115e78a7d8625c3f3. To fix this issue, it is recommended to deploy a patch. The vendor responded with a vulnerability confirmation and a list of security measures they have established already (e.g. disabled URL parsing, disabled URL upload mode, removed URL-to-markdown conversion).
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A security vulnerability has been detected in Rarlab RAR App up to 7.11 Build 127 on Android. This affects an unknown part of the component com.rarlab.rar. Such manipulation leads to path traversal. It is possible to launch the attack remotely. Attacks of this nature are highly complex. It is indicated that the exploitability is difficult. The exploit has been disclosed publicly and may be used. Upgrading to version 7.20 build 128 is able to mitigate this issue. You should upgrade the affected component. The vendor responded very professional: "This is the real vulnerability affecting RAR for Android only. WinRAR and Unix RAR versions are not affected. We already fixed it in RAR for Android 7.20 build 128 and we publicly mentioned it in that version changelog. (...) To avoid confusion among users, it would be useful if such disclosure emphasizes that it is RAR for Android only issue and WinRAR isn't affected."
Risk Information
cvss2
Base: 5.1
Severity: HIGH
AV:N/AC:H/Au:N/C:P/I:P/A:P
cvss3
Base: 5.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this issue is the function zfilev2_api.OpenSafe of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation of the argument safe_dir causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=franklin-park-conservatory' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
