What is the official website of HMSHost International ?

The official website of HMSHost International is http://www.hmshost.work.

What is HMSHost International's cybersecurity risk score?

HMSHost International has an AI-generated cybersecurity risk score of 780 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has HMSHost International experienced?

According to Rankiteo, HMSHost International currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has HMSHost International been affected by any supply chain cyber incidents ?

According to Rankiteo, HMSHost International has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does HMSHost International have SOC 2 Type 1 certification ?

According to Rankiteo, HMSHost International is not certified under SOC 2 Type 1.

Does HMSHost International have SOC 2 Type 2 certification ?

According to Rankiteo, HMSHost International does not hold a SOC 2 Type 2 certification.

Does HMSHost International comply with GDPR ?

According to Rankiteo, HMSHost International is not listed as GDPR compliant.

Does HMSHost International have PCI DSS certification ?

According to Rankiteo, HMSHost International does not currently maintain PCI DSS compliance.

Does HMSHost International comply with HIPAA ?

According to Rankiteo, HMSHost International is not compliant with HIPAA regulations.

Does HMSHost International have ISO 27001 certification ?

According to Rankiteo,HMSHost International is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does HMSHost International operate in ?

HMSHost International operates primarily in the Hospitality industry.

How many employees does HMSHost International have ?

HMSHost International employs approximately 1,209 people worldwide.

Does HMSHost International own any subsidiaries ?

HMSHost International presently has no subsidiaries across any sectors.

How many LinkedIn followers does HMSHost International have ?

HMSHost International's official LinkedIn profile has approximately 48,285 followers.

What is the NAICS classification code for HMSHost International ?

HMSHost International is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Does HMSHost International have a Crunchbase profile ?

No, HMSHost International does not have a profile on Crunchbase.

Does HMSHost International have a LinkedIn profile ?

Yes, HMSHost International maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hmshostinternational.

How many cybersecurity incidents has HMSHost International experienced ?

As of September 17, 2026, Rankiteo reports that HMSHost International has not experienced any cybersecurity incidents.

How many peer or competitor companies does HMSHost International have ?

HMSHost International has an estimated 14,448 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

HMSHost International

Boost Score +25 with badge (5 left)

780

/1000

Fair

805

/1000

Good

HMSHost International Vendor Cyber Rating & Cyber Score

hmshost.work

Add Your Compliance Badge

HMSHost is a leading global restaurateur with over 50 years of experience in creating and operating hospitality outlets for travel venues. Our mission is to take care of people on the move. HMSHost operates international brands and local/regional proprietary concepts in airports and travel venues around the globe. HMSHost International has food & beverage outlets in 42 airports and 21 train stations in Europe, the Middle East, Asia and the Pacific. We are part of the Autogrill Group and working with us means joining a major international company serving more than 900 million people each year. All over the world, we have the same goal: feel good and make travellers feel good.

HMSHost International

HMSHost International CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

HMSHost International Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HMSHost International

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for HMSHost International in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for HMSHost International in 2026.

Incident Types HMSHost International vs Hospitality Industry Avg (This Year)

No incidents recorded for HMSHost International in 2026.

Incident History - HMSHost International (X = Date, Y = Severity)

Loading…

SUBSIDIARY

HMSHost International Subsidiaries

HMSHost International

Hospitality

Website: http://www.hmshost.work

Company Size: 1,209

AvoltaRetail

Dufry GroupRetail

HMSHostFood and Beverage Services

AutogrillRestaurants

Hellenic Duty Free ShopsRetail

HMSHost Middle EastFood & Beverages

HudsonRetail

Dufry FranceRetail

HMSHost NederlandHospitality

HMSHost IndiaHospitality

Autogrill ItaliaRestaurants

HMSHost IndonesiaFood and Beverage Services

Journey For Good FoundationNon-profit Organization Management

Autogrill GermanyHospitality

Loading…

HMSHost International Similar Companies

J D Wetherspoon

jdwetherspooncareers.com

J D Wetherspoon is a leading pub operator in the UK and Ireland. Back in 1979, founder chairman Tim Martin opened the very first Wetherspoon – in Muswell Hill, north London. Today, Tim and the company run over 850 pubs and hotels, spread right across the UK and, more recently, Ireland. During its history of over 40 years, Wetherspoon has repeatedly led the way with ground-breaking initiatives, picked up hundreds of awards (covering all aspects of pub life) and grown from a handful of staff to over 40,000 employees. The company seeks to develop its staff through effective and award-winning training and development, through a positive working environment and, of course, by means of a competitive pay packet. Every year, thousands of staff complete one or more of our award-winning training courses, not only preparing them to work safely and to the best of their ability, but also inspiring them to pursue positive career development. The company prides itself in offering, at all levels, excellent training and support.

Best Western Hotels & Resorts

bestwestern.com

Best Western Hotels & Resorts headquartered in Phoenix, Arizona, is a privately held hotel company within the BWH℠ Hotels global enterprise. With 19 brands and approximately 4,300 hotels in over 100 countries and territories worldwide*, BWH Hotels suits the needs of developers and guests in every market. Brands include Best Western®, Best Western Plus®, Best Western Premier®, @HOME by Best WesternSM, Executive Residency by Best Western®, Vīb®, GLō®, Aiden®, Sadie®, BW Premier Collection® and BW Signature Collection®. Through acquisition, WorldHotelsTM Luxury, Elite, Distinctive and Crafted collections are also offered. Completing the portfolio is SureStay®, SureStay Plus®, SureStay Collection® and SureStay Studio® franchises**. For more information visit www.bestwestern.com, www.bestwesterndevelopers.com, www.worldhotels.com and www.surestay.com. * Numbers are approximate, may fluctuate, and include hotels currently in the development pipeline. **All Best Western, WorldHotels and SureStay branded hotels are independently owned and operated.

Shangri-La Group

cb shangri-la.com

Headquartered in Hong Kong SAR, the Shangri-La Group has grown from a single hotel business to a diverse and integrated global portfolio comprising quality real estate and investment properties, wellness and lifestyle facilities. Today, the Group owns, operates and manages 100+ hotels under our family of five brands: Shangri-La, Shangri-La Signatures, Kerry Hotels, JEN by Shangri-La, and Traders. We are part of the Kuok Group, one of Asia's most dynamic multinational conglomerates and a leader in properties, logistics, agribusiness, maritime and hospitality. From our strong base in Asia, we have expanded into key gateway cities and markets around the world. Our properties sit on some of the world’s most prestigious addresses and exotic destinations. Through the environments we have created, we enable people to come together to live, work, play, eat, and rest well.

Hilton

hilton.com

Hilton (NYSE: HLT) is a leading global hospitality company with a portfolio of 27 world-class brands comprising more than 9,100 properties and over 1.3 million rooms, in 143 countries and territories. Dedicated to fulfilling its founding vision to fill the earth with the light and warmth of hospitality, Hilton has welcomed over 4 billion guests in its more than 100-year history. Named as the No. 1 World’s Best Workplace by Great Place to Work and Fortune, Hilton aims to create the best culture for its 500,000 team members around the world. Hilton has introduced industry-leading technology enhancements to improve the guest experience, including Digital Key Share, automated complimentary room upgrades and the ability to book confirmed connecting rooms. Through the award-winning guest loyalty program Hilton Honors, the nearly 250 million Hilton Honors members who book directly with Hilton can earn Points for hotel stays and experiences money can't buy. With the free Hilton Honors app, guests can book their stay, select their room, check in, unlock their door with a Digital Key and check out, all from their smartphone. Visit stories.hilton.com for more information, and connect with Hilton on Facebook, X, LinkedIn, Instagram and YouTube.

Hampton

hampton.com

The Hampton brand, including Hampton Inn, Hampton Inn & Suites and Hampton by Hilton, is an award-winning leader in the upper-midscale hotel segment. With more than 2,700 properties in 32 countries globally, Hampton is part of Hilton Worldwide, the leading global hospitality company. All Hampton Hotels offer warm surroundings and a friendly service culture and personality, defined as “Hamptonality,” supported by its 100% Satisfaction Guarantee. High-quality accommodations, in-room conveniences and the latest technology, combined with numerous locations and consistent offerings, have made Hampton a leader in its segment and one of the fastest growing hotel brands. For more information please visit: www.hampton.com www.hamptonfranchise.com news.hampton.com www.hiltonworldwide.com/careers/ To connect with us on social please visit: www.facebook.com/hampton www.twitter.com/hampton www.youtube.com/hampton

IHG Hotels & Resorts

ihgplc.com

IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. With a family of 19 hotel brands and IHG One Rewards, one of the world's largest hotel loyalty programmes, IHG has over 6,300 open hotels in more than 100 countries, and a development pipeline of over 2,000 properties. Luxury & Lifestyle: Six Senses Hotels Resorts Spas, Regent Hotels & Resorts, InterContinental Hotels & Resorts, Vignette Collection, Kimpton Hotels & Restaurants, Hotel Indigo Premium: voco hotels, HUALUXE Hotels & Resorts, Crowne Plaza Hotels & Resorts, EVEN Hotels Essentials: Holiday Inn Express, Holiday Inn Hotels & Resorts, Garner hotels, avid hotels Suites: Atwell Suites, Staybridge Suites, Holiday Inn Club Vacations, Candlewood Suites Exclusive Partners: Iberostar Beachfront Resorts InterContinental Hotels Group PLC is the Group's holding company and is incorporated and registered in England and Wales. Approximately 345,000 people work across IHG's hotels and corporate offices globally. Visit us online for more about our hotels and reservations and IHG One Rewards. To download the IHG One Rewards app, visit the Apple App or Google Play stores.

Holiday Inn

holidayinn.com

More than an iconic place to stay, Holiday Inn Hotels are a place to be in the moment–gathered to celebrate with family, laughing with friends, sharing a meal with the team, or just for some well-deserved me-time. No matter the reason you travel, when you’re here, you’re right where you’re meant to be. Book with us and become an IHG One Rewards member.

TUI

tuigroup.com

We’re adventure seekers. Smile givers. Impact makers. We believe in the power of travel. It broadens horizons for our customers, and for our people too. New places to live, new roles to explore, new communities to join. It’s yours for the taking. We’re TUI, a leading global travel and leisure experience company that makes holiday dreams come true for people around the world. We are one of the world’s leading tourism groups counting 1200 travel agencies and online portals, five airlines with around 130 aircraft, over 400 hotels, 16 cruise liners, digital platforms for tours and activities and most importantly over 60 000 colleagues around the world. What unites us is creating moments that enrich the lives of our 21 million customers. Beside the unforgettable experience we provide our customers, we also believe in the good that tourism can bring and we care deeply about our environmental impact. The TUI Care foundation has projects in over 30 countries worldwide, building on the potential of tourism as a global force for development. The Foundation opens up new perspectives through education and training, empowers local communities to benefit from the success of tourism and engages in the protection of nature and the environment. At TUI we simply say “Let’s TUI it”. For us, that means creating happiness. Tackling challenges every day together, with a positive, can-do attitude, and finding solutions even for the most unexpected situations. Our teams across TUI are just as diverse as our destinations. So whether you have lots of experience or none at all. If you want to work in an office or feel best in the field. No matter if you’re an accomplished tech whizz, an aspiring entertainer, or simply in love with flying. There’s a place for you here.

ITC Hotels Limited

itchotels.com

Established in 1975, ITC Hotels Limited has grown to encompass over 140+ hotels across 90+ destinations, solidifying its presence in the Indian subcontinent ITC Hotels seamlessly blends India’s rich tradition of hospitality with globally benchmarked services, offering a collection of hotels and resorts that reflect the unique culture and ethos of each destination. The group operates under six vibrant brands: ITC Hotels and Mementos in the luxury segment, Storii in the boutique premium segment, Welcomhotel in the upper upscale category, Fortune in the midscale segment, and WelcomHeritage in the heritage leisure space

Loading…

NEWS

HMSHost International CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 12, 2018 08:00 AM

Leon and HMSHost International reveal extended partnership plans

'Naturally fast food' brand, Leon has announced its extended, exclusive partnership with global restaurateur HMSHost International today.

Read Article

May 02, 2014 07:00 AM

Autogrill renews its concession at Copenhagen Airport

Through its HMSHost International subsidiary, Autogrill Group has secured an early renewal of its concession at Copenhagen International...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-65388

SUMMARY

A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/apple/containerization/security/advisories/GHSA-mx96-5vvg-x2mg

CVE-2026-61599

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `__import__(module_path, ...)`. The module is imported — running its top-level code (import side effects) — before the framework checks that the resolved object is a `LiveView` subclass and before any per-view authentication. The `LIVEVIEW_ALLOWED_MODULES` allowlist that should contain this is fail-open (`if allowed_modules:` — skipped when the setting is unset, the framework default) and uses loose `startswith` matching. An unauthenticated WebSocket client (the WS handshake does not require auth; per-view auth runs only after import + instantiate) can therefore send a `mount` / `live_redirect_mount` / `url_change` frame (or an SSE mount) with `view = "<any.importable.module>.AnyName"` and cause the server to import — and execute the top-level code of — any importable Python module by name. Version 1.0.7 fixes the issue with a fail-closed resolution gate (`djust._view_resolution.is_view_import_allowed`): a client view path resolves only if (a) its module is already loaded (`sys.modules` — so resolving runs no new code; URL-routed views loaded by URLconf at startup keep working with zero config) or (b) it matches `LIVEVIEW_ALLOWED_MODULES` on a module-segment boundary (explicit opt-in for lazily-imported views). The gate runs before `__import__` at all three sinks (+ defense-in-depth inside `_instantiate_view`). As a workaround, set `LIVEVIEW_ALLOWED_MODULES` to the narrow list of modules that contain your mountable LiveView classes. (Note: pre-patch the allowlist is `startswith`-matched and the import still precedes the subclass check, so this is mitigation, not a complete fix.)

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: )

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-61596

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSocket mount and event paths but not on three other render entry points: (a) the initial HTTP GET render, (b) SPA `url_change` navigation, and (c) `{% live_render %}` embedded child views. An authenticated user could therefore view (and on some paths act on) an object they are not authorized for by loading the page directly, navigating to it via SPA url-change, or composing it as an embedded child — a classic IDOR / broken object-level access control on object-scoped views. This is fixed in djust 1.0.7. All render entry points now route through a shared `enforce_object_permission` chokepoint: HTTP GET returns 403, `url_change` emits a `permission_denied` frame and skips the render, and `{% live_render %}` (eager + lazy) refuses the embed. Views without a custom `get_object` are unaffected (no-op). No reliable workaround short of upgrading. Do not expose object-scoped views through the HTTP-GET / url_change / live_render paths until patched.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-61589

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().get(...)` with no `HTTP_HOST`, so `request.get_host()` defaulted to `"testserver"` on the live path. Host/subdomain/domain `TenantResolver`s then misresolved the tenant — `None` on the live path while the HTTP path resolved correctly. With `STRICT_MODE=False` the tenant-scoped managers returned unscoped rows (cross-tenant disclosure); with the default they returned an empty queryset (broken tenancy). This is fixed in djust 1.0.7. The handshake Host is extracted from the ASGI scope, validated against `ALLOWED_HOSTS` (the same logic as the CSWSH Origin gate, parsed with Django's `split_domain_port` so malformed Hosts are rejected at the boundary), and propagated — with the TLS scheme — into the reconstructed request, so live-path tenant resolution matches HTTP exactly. There is no known workaround on the live path short of upgrading. Users are most exposed when combined with `STRICT_MODE=False`.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: 6.3)

cvss3

Base Score: 6.3

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Impact Score

Exploitability

1.8

REFERENCES

CVE-2026-61588

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

HMSHost International Vendor Cyber Rating & Cyber Score

HMSHost International A.I CyberSecurity Scoring

HMSHost International CyberSecurity News & History

HMSHost International Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for HMSHost International

Incidents vs Hospitality Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types HMSHost International vs Hospitality Industry Avg (This Year)

Incident History - HMSHost International (X = Date, Y = Severity)

HMSHost International Subsidiaries

HMSHost International

HMSHost International Similar Companies

J D Wetherspoon

Best Western Hotels & Resorts

Shangri-La Group

Hilton

Hampton

IHG Hotels & Resorts

Holiday Inn

TUI

ITC Hotels Limited

HMSHost International CyberSecurity News

Leon and HMSHost International reveal extended partnership plans

Autogrill renews its concession at Copenhagen Airport

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

HMSHost International CyberSecurity News & History

HMSHost International Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for HMSHost International

Incidents vs Hospitality Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types HMSHost International vs Hospitality Industry Avg (This Year)

Incident History - HMSHost International (X = Date, Y = Severity)

HMSHost International Subsidiaries

HMSHost International

HMSHost International Similar Companies

J D Wetherspoon

Best Western Hotels & Resorts

Shangri-La Group

Hilton

Hampton

IHG Hotels & Resorts

Holiday Inn

TUI

ITC Hotels Limited

HMSHost International CyberSecurity News

Leon and HMSHost International reveal extended partnership plans

Autogrill renews its concession at Copenhagen Airport

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo