What is the official website of ITOCHU Corporation ?

The official website of ITOCHU Corporation is http://www.itochu.co.jp.

What is ITOCHU Corporation's cybersecurity risk score?

ITOCHU Corporation has an AI-generated cybersecurity risk score of 824 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has ITOCHU Corporation experienced?

According to Rankiteo, ITOCHU Corporation currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has ITOCHU Corporation been affected by any supply chain cyber incidents ?

According to Rankiteo, ITOCHU Corporation has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does ITOCHU Corporation have SOC 2 Type 1 certification ?

According to Rankiteo, ITOCHU Corporation is not certified under SOC 2 Type 1.

Does ITOCHU Corporation have SOC 2 Type 2 certification ?

According to Rankiteo, ITOCHU Corporation does not hold a SOC 2 Type 2 certification.

Does ITOCHU Corporation comply with GDPR ?

According to Rankiteo, ITOCHU Corporation is not listed as GDPR compliant.

Does ITOCHU Corporation have PCI DSS certification ?

According to Rankiteo, ITOCHU Corporation does not currently maintain PCI DSS compliance.

Does ITOCHU Corporation comply with HIPAA ?

According to Rankiteo, ITOCHU Corporation is not compliant with HIPAA regulations.

Does ITOCHU Corporation have ISO 27001 certification ?

According to Rankiteo,ITOCHU Corporation is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does ITOCHU Corporation operate in ?

ITOCHU Corporation operates primarily in the Wholesale Import and Export industry.

How many employees does ITOCHU Corporation have ?

ITOCHU Corporation employs approximately 2,004 people worldwide.

Does ITOCHU Corporation own any subsidiaries ?

ITOCHU Corporation presently has no subsidiaries across any sectors.

How many LinkedIn followers does ITOCHU Corporation have ?

ITOCHU Corporation's official LinkedIn profile has approximately 40,520 followers.

What is the NAICS classification code for ITOCHU Corporation ?

ITOCHU Corporation is classified under the NAICS code 426, which corresponds to Others.

Does ITOCHU Corporation have a Crunchbase profile ?

No, ITOCHU Corporation does not have a profile on Crunchbase.

Does ITOCHU Corporation have a LinkedIn profile ?

Yes, ITOCHU Corporation maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/itochu-corporation.

How many cybersecurity incidents has ITOCHU Corporation experienced ?

As of September 7, 2026, Rankiteo reports that ITOCHU Corporation has not experienced any cybersecurity incidents.

How many peer or competitor companies does ITOCHU Corporation have ?

ITOCHU Corporation has an estimated 1,085 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

ITOCHU Corporation

Boost Score +25 with badge (5 left)

824

/1000

Good

849

/1000

Good

ITOCHU Corporation Vendor Cyber Rating & Cyber Score

itochu.co.jp

Add Your Compliance Badge

The history of ITOCHU Corporation dates back to 1858 when the Company's founder Chubei Itoh commenced linen trading operations. Since then, ITOCHU has evolved and grown over 160 years. With approximately 100 bases in 62 countries, ITOCHU, one of the leading sogo shosha, is engaging in domestic trading, import/export, and overseas trading of various products such as textile, machinery, metals, minerals, energy, chemicals, food, general products, realty, information and communications technology, and finance, as well as business investment in Japan and overseas.

ITOCHU Corporation A.I CyberSecurity Scoring

Scoring History

ITOCHU Corporation

ITOCHU Corporation CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

ITOCHU Corporation Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for ITOCHU Corporation

Incidents vs Wholesale Import and Export Industry Avg (This Year)

No incidents recorded for ITOCHU Corporation in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for ITOCHU Corporation in 2026.

Incident Types ITOCHU Corporation vs Wholesale Import and Export Industry Avg (This Year)

No incidents recorded for ITOCHU Corporation in 2026.

Incident History - ITOCHU Corporation (X = Date, Y = Severity)

Loading…

SUBSIDIARY

ITOCHU Corporation Subsidiaries

Parent Company

ITOCHU Corporation

Wholesale Import and Export

Website: http://www.itochu.co.jp

Company Size: 10,001+ employees

No subsidiary data available for this company.

Loading…

ITOCHU Corporation Similar Companies

None at this time

none.com

None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None None

Loading…

NEWS

ITOCHU Corporation CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 05, 2026 08:00 AM

ITOCHU completes partial sale of Finnish stake, cites market challenges

BAKU, Azerbaijan, Feb.5. ITOCHU Corporation said it has completed a partial sale of its shares in Finnish pulp maker Metsä Fibre Oy to Metsä...

Read Article

January 29, 2026 08:00 AM

Reading the 2026 IT Landscape (Part 2): Insights from Japan’s Top IT Leaders

As we look ahead to 2026, corporate IT strategies are entering a decisive phase. Generative AI is no longer an experimental tool;...

Read Article

December 01, 2025 08:00 AM

Wood Partners Announces Strategic Minority Investment by ITOCHU Corporation

Wood Partners ("Wood" or "Wood Partners"), one of the nation's largest developers of multifamily communities, is pleased to announce a...

Read Article

November 04, 2025 08:00 AM

Japan's Itochu posts 14% rise in half-year net profit

Japanese trading house Itochu posted on Wednesday a 500.3 billion yen ($3.32 billion) net profit in the six months ended September,...

Read Article

August 12, 2025 07:00 AM

Launch of Cybersecurity Assessment Service for Financial Institutions

Press releases and announcements from ITOCHU Techno-Solutions (CTC) are posted here.

Read Article

August 04, 2025 07:00 AM

Itochu’s AI Strategy: Analysis of Dominance in Trading, Investments, Textiles AI

Itochu's AI strategy leverages its trading ecosystem and market-in philosophy to dominate real-world industrial and consumer AI.

Read Article

May 30, 2025 07:00 AM

Launch of Cybersecurity Strategy Roadmap Development Support Service

Assisting formulation of countermeasure plans based on the latest international guidelines with CTC's expertise. Print. May 30, 2025 ITOCHU...

Read Article

May 30, 2025 07:00 AM

ITOCHU enters US insurance distribution space

Japanese conglomerate ITOCHU Corporation is entering the US retail insurance distribution sector with the formation of a capital and business alliance.

Read Article

May 30, 2025 07:00 AM

Exclusive: Kretinsky's EPH, Itochu among expected bidders for Energia, sources say

Daniel Kretinsky-backed Czech energy group EPH and Japanese trading house Itochu are expected to make preliminary bids for Irish utility...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86304

SUMMARY

MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor. parse_assertion in MojoX::Authentication::Model::SAML2 calls Net::SAML2::Binding::POST->new with no cacert, cert_text or anchors argument, then passes the returned XML to Net::SAML2::Protocol::Assertion->new_from_xml with the IdP signing certificate as cacert. In Net::SAML2 before 0.86 that certificate guards only encrypted assertions, so the signature on an unencrypted assertion is checked against the certificate the response itself carries. An attacker starts a SAML login, then posts a response signed with a certificate of their own. The audience, InResponseTo and timestamp checks that follow are all satisfiable by the attacker, so the response authenticates any NameID it carries.

Published

Date2026-09-06

Updated

Date2026-09-06

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-86232

SUMMARY

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_del.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Published

Date2026-09-06

Updated

Date2026-09-06

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-86231

SUMMARY

A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.java. Performing a manipulation of the argument known_hosts results in improper check for certificate revocation. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is told to be difficult. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.28.6 is able to address this issue. The patch is named 194a2f76a5c0f1c3f778565be3fd66bcafc42d23. You should upgrade the affected component.

Published

Date2026-09-06

Updated

Date2026-09-06

RISK INFORMATION (Score: 3.7)

cvss2

Base Score: 2.6

Complexity: HIGH

AV:N/AC:H/Au:N/C:N/I:P/A:N

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

cvss4

Base Score: 2.9

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-86228

SUMMARY

A security vulnerability has been detected in JeecgBoot up to 3.9.3. This vulnerability affects the function exportXls of the file jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/llm/controller/AiragModelController.java. Such manipulation of the argument credential leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 3.9.5 is able to resolve this issue. The name of the patch is a2be896f753936956ee6863b632b8e5a0231345c. You should upgrade the affected component.

Published

Date2026-09-06

Updated

Date2026-09-06

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:N/A:N

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-86227

SUMMARY

A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. Patch name: 4691888e7fab3df128f0bde5750c9fde2ae552fa. To fix this issue, it is recommended to deploy a patch. Exploitation requires cluster mode plus attacker-controlled dump.rdb at startup (data-dir write access, replication feed, or a stored crafted RDB) - an attacker-position DoS at boot, not network pre-auth. The issue report was closed stating it "is worth fixing for the sake of memory safety… but I don't think it meets our bar for a security disclosure."

Published

Date2026-09-06

Updated

Date2026-09-06

RISK INFORMATION (Score: 3.1)

cvss2

Base Score: 2.1

Complexity: HIGH

AV:N/AC:H/Au:S/C:N/I:N/A:P

cvss3

Base Score: 3.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 1.3

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.6

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…