What is the official website of Dentons Hamilton Harrison & Mathews ?

The official website of Dentons Hamilton Harrison & Mathews is http://www.dentonshhm.com.

What is Dentons Hamilton Harrison & Mathews's cybersecurity risk score?

Dentons Hamilton Harrison & Mathews has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Dentons Hamilton Harrison & Mathews experienced?

According to Rankiteo, Dentons Hamilton Harrison & Mathews currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Dentons Hamilton Harrison & Mathews been affected by any supply chain cyber incidents ?

According to Rankiteo, Dentons Hamilton Harrison & Mathews has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Dentons Hamilton Harrison & Mathews have SOC 2 Type 1 certification ?

According to Rankiteo, Dentons Hamilton Harrison & Mathews is not certified under SOC 2 Type 1.

Does Dentons Hamilton Harrison & Mathews have SOC 2 Type 2 certification ?

According to Rankiteo, Dentons Hamilton Harrison & Mathews does not hold a SOC 2 Type 2 certification.

Does Dentons Hamilton Harrison & Mathews comply with GDPR ?

According to Rankiteo, Dentons Hamilton Harrison & Mathews is not listed as GDPR compliant.

Does Dentons Hamilton Harrison & Mathews have PCI DSS certification ?

According to Rankiteo, Dentons Hamilton Harrison & Mathews does not currently maintain PCI DSS compliance.

Does Dentons Hamilton Harrison & Mathews comply with HIPAA ?

According to Rankiteo, Dentons Hamilton Harrison & Mathews is not compliant with HIPAA regulations.

Does Dentons Hamilton Harrison & Mathews have ISO 27001 certification ?

According to Rankiteo,Dentons Hamilton Harrison & Mathews is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Dentons Hamilton Harrison & Mathews operate in ?

Dentons Hamilton Harrison & Mathews operates primarily in the Law Practice industry.

How many employees does Dentons Hamilton Harrison & Mathews have ?

Dentons Hamilton Harrison & Mathews employs approximately 132 people worldwide.

Does Dentons Hamilton Harrison & Mathews own any subsidiaries ?

Dentons Hamilton Harrison & Mathews presently has no subsidiaries across any sectors.

How many LinkedIn followers does Dentons Hamilton Harrison & Mathews have ?

Dentons Hamilton Harrison & Mathews's official LinkedIn profile has approximately 9,909 followers.

What is the NAICS classification code for Dentons Hamilton Harrison & Mathews ?

Dentons Hamilton Harrison & Mathews is classified under the NAICS code 54111, which corresponds to Offices of Lawyers.

Does Dentons Hamilton Harrison & Mathews have a Crunchbase profile ?

No, Dentons Hamilton Harrison & Mathews does not have a profile on Crunchbase.

Does Dentons Hamilton Harrison & Mathews have a LinkedIn profile ?

Yes, Dentons Hamilton Harrison & Mathews maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hamilton-harrison-&-mathews.

How many cybersecurity incidents has Dentons Hamilton Harrison & Mathews experienced ?

As of July 7, 2026, Rankiteo reports that Dentons Hamilton Harrison & Mathews has not experienced any cybersecurity incidents.

How many peer or competitor companies does Dentons Hamilton Harrison & Mathews have ?

Dentons Hamilton Harrison & Mathews has an estimated 16,159 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

DHHM

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Dentons Hamilton Harrison & Mathews Vendor Cyber Rating & Cyber Score

dentonshhm.com

Add Your Compliance Badge

Dentons Hamilton Harrison & Mathews is one of Kenya’s highly acclaimed law firms, with a tradition of excellence dating back to 1902. HH&M has built up a reputation as an innovative, experienced, responsive and highly-skilled firm with the capacity and technical expertise to offer practical legal solutions to both corporate and individual clients. The firm has consistently been rated as top tier dispute resolution, corporate and commercial law in Kenya by various international legal directories including Chambers Global, IFLR 1000 and Legal 500. The firm is one of Kenya’s largest law firms with a dedicated team comprised of 11 Partners and 35 associates, who are supported by a team of over 40 legal assistants, administrative and

DHHM A.I CyberSecurity Scoring

Scoring History

DHHM

Dentons Hamilton Harrison & Mathews CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

DHHM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DHHM

Incidents vs Law Practice Industry Avg (This Year)

No incidents recorded for Dentons Hamilton Harrison & Mathews in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Dentons Hamilton Harrison & Mathews in 2026.

Incident Types DHHM vs Law Practice Industry Avg (This Year)

No incidents recorded for Dentons Hamilton Harrison & Mathews in 2026.

Incident History - DHHM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Dentons Hamilton Harrison & Mathews Subsidiaries

DHHM

Law Practice

Website: http://www.dentonshhm.com

Company Size: 132

DentonsLaw Practice

Vella Pugliese Buosi e Guidoni AdvogadosLaw Practice

Dentons RodykLaw Practice

Dentons HPRPLegal Services

Dentons ChileLaw Practice

Dentons w PolsceUsługi prawne

Dentons ItaliaServizi legali

Dentons ACAS-LawLaw Practice

Dentons EspañaDespachos de abogados

Dentons Middle EastLaw Practice

Dentons Zaanouni Law Firm & AssociatesLaw Practice

Dentons BudapestLegal Services

Dentons In-House SolutionsLegal Services

Dentons Hong Kong LLPLegal Services

Dentons Myanmar LimitedLaw Practice

Dentons in DeutschlandRechtskanzleien

Nextlaw Referral NetworkLaw Practice

Dentons Česká republikaLaw Practice

Loading…

Dentons Hamilton Harrison & Mathews Similar Companies

DLA Piper

dlapiper.com

DLA Piper is a global law firm helping our clients achieve their goals wherever they do business. Our pursuit of innovation has transformed our delivery of legal services. With offices in the Americas, Europe, the Middle East, Africa and Asia Pacific, we deliver exceptional outcomes on cross-border projects, critical transactions and high-stakes disputes. Every day we help trailblazing organizations seize business opportunities and successfully manage growth and change at speed. Through our pro bono work and community investment around the world, we help create a more just and sustainable future. Visit dlapiper.com to discover more.

Loading…

NEWS

Dentons Hamilton Harrison & Mathews CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

May 16, 2025 11:11 AM

Top 10 Best Law Firms in Kenya

Tier 1 firms include Anjarwalla & Khanna, Bowmans, and Dentons HHM. Rankings cover practice areas like M&A, finance, and litigation.

Read Article

October 17, 2024 07:00 AM

Dentons leads industry with women at the helm in Kenya, Uganda, Tanzania

Dentons, the world's largest global law firm, recently reached an important milestone with a full roster of women leaders across its offices in East Africa.

Read Article

September 26, 2024 07:00 AM

"He was selected": Ruto's son Nick working at law firm representing Adani Group

President William Ruto's son, Nick, is working at Dentons, Hamilton Harrison & Mathews, the law firm which is defending Adani Airports Holdings.

Read Article

September 25, 2024 07:00 AM

Details of 122-year-old prestigious law firm where Nick Ruto works

The son of President William Ruto, Nicholas 'Nick' Kipkurgat Ruto, took up a position at one of Kenya's oldest and most prestigious law...

Read Article

September 25, 2024 07:00 AM

President Ruto's 'long-term friend' Adil defends Nick Ruto's job at Adani's Kenya law firm

For weeks, lawyer Nick Ruto, President William Ruto's son, has been at the centre of controversy over his association with Dentons, Hamilton...

Read Article

July 19, 2024 07:00 AM

Dentons Kenya appoints groundbreaking managing partner

The firm has promoted a banking and finance partner as its first ever female leader in Kenya. Dentons Hamilton Harrison & Mathews,...

Read Article

January 18, 2024 08:00 AM

Changing of the guard at Dentons Kenya

Hamilton Harrison & Matthews, the Kenyan branch of global law firm Dentons, has announced the appointment of Kiragu Kimani SC as its new senior partner.

Read Article

December 10, 2020 08:00 AM

LSK backs local firm’s deal with global practice Dentons

One of Kenya's oldest law firms, Hamilton Harrison & Mathews Advocates (HH&M), has obtained the backing of the Kenyan lawyers' lobby to...

Read Article

June 28, 2020 07:00 AM

Rivalry heats up as partners in top law firm part ways

Four partners at Kaplan & Stratton, one of the oldest law firms in country, quit to start their own practice.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-53646

SUMMARY

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already exists for a client (from a previous unexpired reset request), subsequent calls to the `reset_password` guest API endpoint reuse the existing token instead of generating a new one. The 15-minute validity window is anchored to the first request's `created_at` timestamp, not the time of the most recent email. An attacker who obtained the original reset link remains able to use it even after the victim requests a new reset, because the original token is never invalidated or rotated. Version 0.8.0 patches the issue. Some workarounds are available. Configure a reverse proxy (e.g., Nginx, Apache, Cloudflare) to apply per-IP rate limiting to the `/client/reset-password` endpoint to minimize the window of opportunity, and/or manually clear expired `client_password_reset` records from the database after a client reports a suspected compromise.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 7.7

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-vp66-w6rc-x32p

CVE-2026-53645

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itself through the admin API, resulting in persistent privilege escalation. A staff user that only has `staff.create_and_edit_staff` can call `/api/admin/staff/permissions_update` targeting their own account and write any permission structure, bypassing the intended role-based access control boundary. Version 0.8.0 patches the issue. Some workarounds are available. Restrict the `staff.create_and_edit_staff` permission to only highly trusted staff members and/or use a reverse proxy or WAF to restrict access to `/api/admin/staff/permissions_update` to specific trusted roles.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-4hf7-xxxw-64rm

CVE-2026-53644

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API key service secrets for orders that are no longer in an `active` state (e.g., `suspended`, `canceled`). The root cause is missing order-state validation in two client API endpoints, despite an `isActive()` helper already existing in the `Serviceapikey` module and the frontend UI correctly gating access on `order.status == 'active'`. Version 0.8.0 contains a fix. Some workarounds are available. If the `Serviceapikey` module is not needed, uninstall it to remove the affected endpoints. One may also use a reverse proxy or WAF to restrict access to `/api/client/order/service` and `/api/client/serviceapikey/reset` based on application-level order-state logic.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-qf6j-vq68-qmfh

CVE-2026-53643

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized actions via admin API endpoints. The root cause is a combination of the `can_always_access` module flag (which grants all staff access to certain modules) and insufficient permission checks or unsafe parameter handling on individual endpoints. Version 0.8.0 contains a fix. Some workarounds are available. Restrict staff accounts to only those who need access to sensitive settings and/or use a reverse proxy or WAF to restrict access to the affected endpoints to trusted IP addresses or higher-privilege roles.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-563q-g4r4-6f9m

CVE-2026-53642

SUMMARY

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enabled, a logged-in client with an unverified email address (`email_approved = 0`) can access all client-area pages (e.g. `/client/balance`, `/client/order/list`, `/client/invoice`) and read real account data, including wallet balances and transaction history. The API-side enforcement correctly restricts unverified clients to only profile-related endpoints, but the page-side enforcement is overly permissive, allowing any request whose path starts with `/client`. Version 0.8.0 contains a fix. No known workarounds that don't involve modifying the source code are available.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-7v47-rh46-w923

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…