What is the official website of John Hancock ?

The official website of John Hancock is https://www.johnhancock.com/index.html.

What is John Hancock's cybersecurity risk score?

John Hancock has an AI-generated cybersecurity risk score of 768 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has John Hancock experienced?

According to Rankiteo, John Hancock currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has John Hancock been affected by any supply chain cyber incidents ?

According to Rankiteo, John Hancock has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does John Hancock have SOC 2 Type 1 certification ?

According to Rankiteo, John Hancock is not certified under SOC 2 Type 1.

Does John Hancock have SOC 2 Type 2 certification ?

According to Rankiteo, John Hancock does not hold a SOC 2 Type 2 certification.

Does John Hancock comply with GDPR ?

According to Rankiteo, John Hancock is not listed as GDPR compliant.

Does John Hancock have PCI DSS certification ?

According to Rankiteo, John Hancock does not currently maintain PCI DSS compliance.

Does John Hancock comply with HIPAA ?

According to Rankiteo, John Hancock is not compliant with HIPAA regulations.

Does John Hancock have ISO 27001 certification ?

According to Rankiteo,John Hancock is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does John Hancock operate in ?

John Hancock operates primarily in the Financial Services industry.

How many employees does John Hancock have ?

John Hancock employs approximately 5,087 people worldwide.

Does John Hancock own any subsidiaries ?

John Hancock presently has no subsidiaries across any sectors.

How many LinkedIn followers does John Hancock have ?

John Hancock's official LinkedIn profile has approximately 70,269 followers.

What is the NAICS classification code for John Hancock ?

John Hancock is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does John Hancock have a Crunchbase profile ?

No, John Hancock does not have a profile on Crunchbase.

Does John Hancock have a LinkedIn profile ?

Yes, John Hancock maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/john-hancock.

How many cybersecurity incidents has John Hancock experienced ?

As of August 9, 2026, Rankiteo reports that John Hancock has not experienced any cybersecurity incidents.

How many peer or competitor companies does John Hancock have ?

John Hancock has an estimated 32,456 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

John Hancock

Boost Score +25 with badge (5 left)

768

/1000

Fair

793

/1000

Fair

John Hancock Vendor Cyber Rating & Cyber Score

https://www.johnhancock.com/index.html

Add Your Compliance Badge

At John Hancock, we have a simple mission: helping our customers live longer, healthier, better lives.™For over 160 years, people have trusted us to be honest, reliable, and 100% committed to our customers. Now, we are marrying the best of a longstanding company with leading-edge innovation that is transforming our industry. Whether it’s helping our clients plan for their financial future, helping local communities grow stronger, or helping our employees chart a course for their careers, we’re committed to offering help every step of the way. For terms of use, please visit: https://www.johnhancock.com/legal.html John Hancock is an equal opportunity employer - AA/F/M/D/V

John Hancock A.I CyberSecurity Scoring

Scoring History

John Hancock

John Hancock CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

John Hancock Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for John Hancock

Incidents vs Financial Services Industry Avg (This Year)

No incidents recorded for John Hancock in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for John Hancock in 2026.

Incident Types John Hancock vs Financial Services Industry Avg (This Year)

No incidents recorded for John Hancock in 2026.

Incident History - John Hancock (X = Date, Y = Severity)

Loading…

SUBSIDIARY

John Hancock Subsidiaries

John Hancock

Financial Services

Website: https://www.johnhancock.com/index.html

Company Size: 5,087

ManulifeInsurance

LOFT: Lab of Forward Thinking™Financial Services

Loading…

John Hancock Similar Companies

Charles Schwab

cb aboutschwab.com

Charles Schwab is a different kind of investment services firm – one that strives to disrupt the status quo of the traditional Wall Street approach on behalf of our clients. We believe today, as we did on Day 1, that when you find ways to improve the investing experience for your clients, then business results will follow. Follow our company culture at #SchwabLife and see how we give back at #Schwab4Good. Support hours: 7 a.m.–7 p.m. CT or 24/7 at schwab.com/contact-us. Social Media Disclosures: https://www.aboutschwab.com/social-media (#0424-TM8W)

BDO Unibank

cb bdo.com.ph

BDO is a full-service universal bank in the Philippines. It provides a complete array of industry-leading products and services including Lending (corporate and consumer), Deposit-taking, Foreign Exchange, Brokering, Trust and Investments, Credit Cards, Corporate Cash Management, and Remittances in the Philippines. Through its local subsidiaries, the Bank offers Leasing and Financing, Investment Banking, Private Banking, Rural Banking, Life Insurance, Insurance Brokerage, and Stock Brokerage services. BDO's institutional strengths and value-added products and services hold the key to its successful business relationships with customers. Its branches remain at the forefront of setting high standards as a sales- and service-oriented, customer-focused force. BDO has one of the largest distribution networks, with more than 1,600 operating branches and over 4,500 ATMs nationwide. Through selective acquisitions and organic growth, BDO has positioned itself for increased balance sheet strength and continuing expansion into new markets. As of 30 June 2022, BDO is the country's largest bank in terms of total resources, customer loans, deposits, and assets under management. BDO is a publicly listed company (PLC), with its shares currently being traded at the Philippine Stock Exchange under the symbol “BDO”. BDO Unibank is regulated by the Banko Sentral ng Pilipinas. https://www.bsp.gov.ph For concerns, please visit any BDO branch near you or reach us through any of the channels listed in the Consumer Assistance page of our website: https://www.bdo.com.ph/consumer-assistance. Deposits are insured by PDIC up to P1 Million per depositor. The BDO, BDO Unibank and other BDO-related trademarks are owned by BDO Unibank, Inc. All Rights Reserved.

S&P Global

cb spglobal.com

S&P Global (NYSE: SPGI) enables businesses, governments, and individuals with trusted data, expertise and technology to make decisions with conviction. We are Advancing Essential Intelligence through world-leading benchmarks, data, and insights that customers need in order to plan confidently, act decisively, and thrive economically in a rapidly changing global landscape.   From helping our customers assess new investments across the capital and commodities markets to guiding them through the energy expansion, acceleration of artificial intelligence, and evolution of public and private markets, we enable the world's leading organizations to unlock opportunities, solve challenges, and plan for tomorrow – today. Learn more at www.spglobal.com. Recruitment Fraud Alert: If you receive an email from a https://www.linkedin.com/redir/suspicious-page?url=spglobalind%2ecom domain or any other regionally based domains, it is a scam and should be reported to [email protected]. S&P Global never requires any candidate to pay money for job applications, interviews, offer letters, “pre-employment training” or for equipment/delivery of equipment. Stay informed and protect yourself from recruitment fraud by reviewing our guidelines, fraudulent domains, and how to report suspicious activity here: https://www.spglobal.com/content/dam/spglobal/corporate/en/documents/careers/Corp_0525-Recruitment-Fraud-Alert.pdf

Revolut

revolut.com

People deserve more from their money. More visibility, more control, and more freedom. Since 2015, Revolut has been on a mission to deliver just that. Our powerhouse of products help our 70+ million customers get more from their money every day. As we continue our lightning-fast growth,‌ 2 things are essential to our success: our people and our culture. In recognition of our outstanding employee experience, we've been certified as a Great Place to Work™. So far, we have 10,000+ people working around the world, from our offices and remotely, to help us achieve our mission. And we're looking for more brilliant people. People who love building great products, redefining success, and turning the complexity of a chaotic world into the simplicity of a beautiful solution.

RHB Banking Group

myworkdayjobs.com

We are a multinational regional financial services provider that is committed to deliver complete solutions to our clients through differentiated segment offerings and an ecosystem that supports simple, fast and seamless customer experience, underpinned by cohesive and inspired workforce and relationship built with stakeholders Headquartered and listed in Malaysia, RHB Banking Group is the longest established local bank, formed though the mergers of several banks, the oldest of which was founded in 1913. RHB Banking Group and its subsidiaries provide a full range of services ranging from retail banking, business banking, corporate and investment banking, Islamic banking, transaction banking to treasury, insurance, asset management, private equity and stockbroking services. TOGETHER WE PROGRESS Our strong heritage is the foundation of our commitment to continue serving the community. For over a 100 years, we have been helping people and businesses grow and succeed, and will continue to do so. Our experience gives us an in-depth understanding of the needs of our customers and partners, inspiring us to constantly innovate and improve to serve them better. With their unending support, we have established ourselves with a strong footprint throughout Malaysia and we are now present in 9 other countries across the ASEAN region. We hope our legacy and pursuit for excellence continues as we tirelessly cultivate and nurture the next generation through our actions and words, preparing a brighter future ahead. We thank those who believe in us and welcome everyone to join us on our exciting journey of progress. The time has come for us to move forward in unison, to realise our greater potential together. Our new brand promise "Together We Progress” honours our past, celebrates the present and welcomes the future. We invite you to join us as we work towards a better and brighter future for all.

BB&T

bbt.com

We’d love to stay connected with you! Please follow our Truist company page and unfollow this page which is no longer active. BB&T and SunTrust formed Truist with a shared purpose—to inspire and build better lives and communities. With our combined resources, collective passion, and commitment to innovation, we’re creating a better financial experience to help people and businesses achieve more. With 275 years of combined BB&T and SunTrust history, Truist serves approximately 12 million households with leading market share in many high growth markets in the country. The company offers a wide range of services including retail, small business and commercial banking; asset management; capital markets; commercial real estate; corporate and institutional banking; insurance; mortgage; payments; specialized lending; and wealth management. Headquartered in Charlotte, North Carolina, Truist is the sixth-largest commercial bank in the U.S. Truist Bank, Member FDIC. Learn more at Truist.com and see social media terms and conditions at Truist.com/SocialTerms.

Sun Life

cb sunlife.com

Sun Life is a leading financial services organization dedicated to helping people achieve lifetime financial security and live healthier lives. We provide a wide range of insurance and investment products and services in key markets around the world including Canada, the United States, the United Kingdom, Hong Kong, the Philippines and Indonesia. At Sun Life, we have more than 34,000 employees and 112,900 advisors worldwide. Websites: Canada www.sunlife.ca/en/ US www.sunlife.com/us/en/ Vietnam www.sunlife.com.vn Hong Kong www.sunlife.com.hk Indonesia www.sunlife.co.id Malaysia www.sunlife.com.my Philippines www.sunlife.com.ph

FactSet

factset.com

FactSet creates flexible, open data and software solutions for tens of thousands of investment professionals around the world, providing instant access to financial data and analytics that investors use to make crucial decisions. For 40 years, through market changes and technological progress, our focus has always been to provide exceptional client service. From more than 60 offices in 23 countries, we’re all working together toward the goal of creating value for our clients, and we’re proud that 95% of asset managers who use FactSet continue to use FactSet, year after year. As big as we grow, as far as we reach, and as successful as we become, we stay connected to our clients and to each other.

Citi

cb citigroup.com

Citi's mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress. Our core activities are safeguarding assets, lending money, making payments and accessing the capital markets on behalf of our clients. We have over 200 years of experience helping our clients meet the world's toughest challenges and embrace its greatest opportunities. We are Citi, the global bank – an institution connecting millions of people across hundreds of countries and cities. For information on Citi’s commitment to privacy, visit on.citi/privacy.

Loading…

NEWS

John Hancock CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 17, 2025 06:18 PM

Market Rankings: Can ProShares Trust ProShares Ultra Nasdaq Cybersecurity stock outperform in 2025 bull market - Trade Performance Summary & Daily Growth Stock Investment Tips

【Financial Markets】✌️Invest $100 and enjoy fast, secure monthly profits. Start now!

Read Article

October 16, 2025 07:36 PM

John Hancock’s $600,000 Data-Breach Deal Gets Final Court Nod

John Hancock Investment Management LLC, UBS Financial Services LLC, and their marketing vendor DG3 North American Inc. will pay $600000 to...

Read Article

September 09, 2025 07:00 AM

Bell Canada Launches Bell Cyber: A Central Pillar in its Strategy to Lead in Managed AI-Powered Solutions

At today's inaugural Bell Cybersecurity Summit in Toronto, Bell officially announced the launch of Bell Cyber, a new brand complementing its...

Read Article

August 28, 2025 07:00 AM

Longtime John Hancock Counsel Joins Prince Lobel In Boston

Prince Lobel Tye LLP announced that a cybersecurity attorney with over 20 years of experience, including over a decade in-house at insurance...

Read Article

April 09, 2025 07:00 AM

John Hancock Investment and Retirement Brands Are Adding Manulife to Their Names

The U.S. insurance business will remain under the John Hancock name.

Read Article

March 15, 2025 07:00 AM

Infosys settles $17.5 mn class action over US cyberattack, data breach

Infosys Ltd has proposed a settlement of class action lawsuits against Infosys McCamish Systems (IMS), a US subsidiary of the company, for data breaches.

Read Article

January 22, 2025 08:00 AM

John Hancock adds ABS fund, Databricks concludes $10bn Series J

Ares acquires Form Technologies, Blackstone and Vista complete $8.4bn Smartsheet buyout and more in today's private capital dealmaking...

Read Article

November 11, 2024 08:00 AM

Latest 401(k) Plan Forfeiture Complaint Filed Against BMO Financial

BMO Financial Corp., a division of North America's eighth-largest bank by assets, was sued in federal court in a complaint seeking class action status.

Read Article

September 09, 2024 07:00 AM

People May Start Living to 150, Creating Retirement Paradox

As people live longer, advisers must combat sequence risk while also driving growth to meet inflation, according to an investment services...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-71983

SUMMARY

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71502

SUMMARY

CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled data. An unauthenticated attacker can create a public conversion whose name or description contains a malicious Vue expression using the application's configured [[ ... ]] delimiters. User profile names may provide an additional injection vector. Although Jinja HTML escaping is applied, the resulting value is subsequently included in a DOM region compiled by Vue. Vue interprets the attacker-controlled value as a template expression rather than ordinary text. By accessing the JavaScript Function constructor from within the expression, an attacker can execute arbitrary JavaScript in the security context of the CTI-Transmute origin. The application's nonce-based Content Security Policy does not prevent exploitation because the Vue runtime compiler requires the unsafe-eval policy exception. The malicious payload is stored by the application and executed whenever another user opens an affected page, such as the public conversion detail page. The victim may be a normal user or an administrator. Successful exploitation could allow the attacker to: * Access data available to the victim through the application. * Extract API keys, tokens, or other sensitive information exposed to the page. * Perform authenticated actions using the victim's session. * Modify conversions or other application data. * Escalate the impact by targeting an administrator. A demonstrated payload can use [].constructor.constructor(...) to obtain the JavaScript Function constructor and execute arbitrary code. The regression tests also show that a short first-stage payload could retrieve an uncapped conversion description and evaluate a larger second-stage payload. The patch addresses the vulnerability by registering a global Jinja finalize hook that inserts a zero-width Unicode word joiner inside every Vue delimiter found in server-rendered values. This prevents Vue from recognizing the values as template expressions while preserving their visible representation.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-71958

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71957

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71956

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command execution with root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…