Comparison Overview

Harvard Museums of Science & Culture

VS

Minnesota Children's Museum

Harvard Museums of Science & Culture

None
Last Update: 2025-12-02
Between 750 and 799

The Harvard Museums of Science & Culture (HMSC) is part of Harvard University and is comprised of four museums: the Collection of Historical Scientific Instruments, the Harvard Museum of Natural History, the Harvard Semitic Museum, and the Peabody Museum of Archeology & Ethnology. HMSC offers lectures and programing for all ages, permanent galleries, and dynamic rotating exhibits. Permanent highlights include a 42-foot-long Kronosaurus, the world-renowned Glass Flowers, massive Maya and Egyptian monuments, and an extensive collection of scientific instruments, both ancient and modern. History The Harvard Museums of Science & Culture (HMSC) partnership officially began on July 1, 2012, with the goal of developing a strong, coordinated public face for the four museums that are within the Faculty of Arts and Sciences at Harvard University. Mission The mission of the Harvard Museums of Science & Culture (HMSC) is to foster curiosity and a spirit of discovery in visitors of all ages, enhancing public understanding of and appreciation for the natural world, science, and human cultures. HMSC works in concert with Harvard faculty, museum curators, and students, as well as with members of the extended Harvard community to provide interdisciplinary exhibitions, events and lectures, and educational programs for students, teachers, and the general public. HMSC draws primarily upon the extensive collections of the member museums and upon the research of their faculty and curators.

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 54
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Minnesota Children's Museum

10 West 7th Street, St. Paul, MN, 55102, US
Last Update: 2025-12-02
Between 750 and 799

Minnesota Children’s Museum is dedicated to sparking children’s learning through play. Our vision: “Kids play more. Adults do, too. All families thrive in a happier, healthier and more innovative community through the radiant power of play.” The museum, which celebrated its 40th anniversary in 2021, has provided playful learning experiences to more than 12 million visitors. The museum's downtown St. Paul location features three floors of fun and 11 interactive exhibits. Minnesota Children's Museum is consistently rated as one of the top children’s museums in the country by national media outlets such as Forbes and Parents and was named as a finalist for an Institute of Museum and Library Services Medal of Service, the nation’s highest honor conferred on museums and libraries. As the nation’s leading developer of traveling children’s museum exhibits, the museum is a trailblazer in creating immersive learning environments, reaching more than 10 million children and adults in the United States, Canada and Mexico. Visit www.mcm.org for more information.

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 113
Subsidiaries: 2
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/harvard-museums-of-science-&-culture.jpeg
Harvard Museums of Science & Culture
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/minnesota-children's-museum.jpeg
Minnesota Children's Museum
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Harvard Museums of Science & Culture
100%
Compliance Rate
0/4 Standards Verified
Minnesota Children's Museum
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Harvard Museums of Science & Culture in 2025.

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Minnesota Children's Museum in 2025.

Incident History — Harvard Museums of Science & Culture (X = Date, Y = Severity)

Harvard Museums of Science & Culture cyber incidents detection timeline including parent company and subsidiaries

Incident History — Minnesota Children's Museum (X = Date, Y = Severity)

Minnesota Children's Museum cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/harvard-museums-of-science-&-culture.jpeg
Harvard Museums of Science & Culture
Incidents

No Incident

https://images.rankiteo.com/companyimages/minnesota-children's-museum.jpeg
Minnesota Children's Museum
Incidents

No Incident

FAQ

Both Harvard Museums of Science & Culture company and Minnesota Children's Museum company demonstrate a comparable AI Cybersecurity Score, with strong governance and monitoring frameworks in place.

Historically, Minnesota Children's Museum company has disclosed a higher number of cyber incidents compared to Harvard Museums of Science & Culture company.

In the current year, Minnesota Children's Museum company and Harvard Museums of Science & Culture company have not reported any cyber incidents.

Neither Minnesota Children's Museum company nor Harvard Museums of Science & Culture company has reported experiencing a ransomware attack publicly.

Neither Minnesota Children's Museum company nor Harvard Museums of Science & Culture company has reported experiencing a data breach publicly.

Neither Minnesota Children's Museum company nor Harvard Museums of Science & Culture company has reported experiencing targeted cyberattacks publicly.

Neither Harvard Museums of Science & Culture company nor Minnesota Children's Museum company has reported experiencing or disclosing vulnerabilities publicly.

Neither Harvard Museums of Science & Culture nor Minnesota Children's Museum holds any compliance certifications.

Neither company holds any compliance certifications.

Minnesota Children's Museum company has more subsidiaries worldwide compared to Harvard Museums of Science & Culture company.

Minnesota Children's Museum company employs more people globally than Harvard Museums of Science & Culture company, reflecting its scale as a Museums, Historical Sites, and Zoos.

Neither Harvard Museums of Science & Culture nor Minnesota Children's Museum holds SOC 2 Type 1 certification.

Neither Harvard Museums of Science & Culture nor Minnesota Children's Museum holds SOC 2 Type 2 certification.

Neither Harvard Museums of Science & Culture nor Minnesota Children's Museum holds ISO 27001 certification.

Neither Harvard Museums of Science & Culture nor Minnesota Children's Museum holds PCI DSS certification.

Neither Harvard Museums of Science & Culture nor Minnesota Children's Museum holds HIPAA certification.

Neither Harvard Museums of Science & Culture nor Minnesota Children's Museum holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.11.1, vllm has a critical remote code execution vector in a config class named Nemotron_Nano_VL_Config. When vllm loads a model config that contains an auto_map entry, the config class resolves that mapping with get_class_from_dynamic_module(...) and immediately instantiates the returned class. This fetches and executes Python from the remote repository referenced in the auto_map string. Crucially, this happens even when the caller explicitly sets trust_remote_code=False in vllm.transformers_utils.config.get_config. In practice, an attacker can publish a benign-looking frontend repo whose config.json points via auto_map to a separate malicious backend repo; loading the frontend will silently run the backend’s code on the victim host. This vulnerability is fixed in 0.11.1.

Risk Information
cvss3
Base: 7.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Description

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fastify/reply-from. This vulnerability is fixed in 12.5.0.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.

Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X