Company Details
lumentechnologies
49,694
586,657
517
lumen.com
0
LUM_6397940
In-progress

Lumen Technologies Company CyberSecurity Posture
lumen.comLumen connects the world. We digitally connect people, data and applications – quickly, securely and effortlessly. Everything we do at Lumen takes advantage of our network strength. From metro connectivity to long-haul data transport to our edge cloud, security, and managed service capabilities, we meet our customers’ needs today and as they build for tomorrow.
Company Details
lumentechnologies
49,694
586,657
517
lumen.com
0
LUM_6397940
In-progress
Between 750 and 799

Lumen Technologies Global Score (TPRM)XXXX

Description: The personal information of hundreds of thousands of CenturyLink customers, including names, addresses, email addresses, and phone numbers was exposed online. A database of 2.8m records containing sensitive information regarding hundreds of thousands of CenturyLink’s customers was left open online for anyone with internet access to see. They included multiple pieces of personal information including name, email address, phone number, and address, along with account-specific information. The database comprised API logs with customer information and contained more than 2.8 million records in total. CenturyLink said to the affected customers. "We will continue to work to protect customer information, takes the protection of our customers’ information seriously, and we will work to ensure that we earn our customers’ trust.
Description: The Maine Office of the Attorney General disclosed a **data breach** affecting **CenturyLink Communications** between **August 20 and August 31, 2020**. The incident stemmed from a **sophisticated password-guessing attack** targeting the **MyCenturyLink customer portal**, compromising **1,942 accounts**. Exposed data included **usernames, email addresses, full names (first and last), service addresses, billing addresses, and related account details**. While no financial or highly sensitive information (e.g., Social Security numbers, payment card data) was confirmed stolen, the breach risked **unauthorized access to personal and account-specific information**, potentially enabling **phishing, identity fraud, or further targeted attacks**. CenturyLink responded by **issuing written notifications to affected customers between September 21–25, 2020**, though the delay between discovery and disclosure raised concerns about proactive mitigation. The attack highlighted vulnerabilities in **authentication mechanisms**, emphasizing the need for stronger password policies and multi-factor authentication (MFA) to prevent credential-stuffing exploits.
Description: Lumen Technologies, a leading provider of telecommunications services, identified two cybersecurity issues, including a ransomware attack. One of the events involved a ransomware attack on a small number of its servers that operate a segmented hosting service. The corporation simply acknowledged that the issue "is currently impairing the operations of a small number of the Company's enterprise customers." It gave no further information regarding the family of ransomware that infected its systems. Lumen developed improved security software following the ransomware attack's detection, which enabled the business to identify a different incursion.


No incidents recorded for Lumen Technologies in 2025.
No incidents recorded for Lumen Technologies in 2025.
No incidents recorded for Lumen Technologies in 2025.
Lumen Technologies cyber incidents detection timeline including parent company and subsidiaries

Lumen connects the world. We digitally connect people, data and applications – quickly, securely and effortlessly. Everything we do at Lumen takes advantage of our network strength. From metro connectivity to long-haul data transport to our edge cloud, security, and managed service capabilities, we meet our customers’ needs today and as they build for tomorrow.


WE ARE EMPOWERING DIGITAL LIFE We don't know how the world will look like in 2050, but we know that A1 Telekom Austria Group is geared up for current and future demands. We are a leading provider of digital services and communications solutions in Central and Eastern Europe, offering a state-of-th

Trublion historique des Télécoms, Free reste un opérateur pas comme les autres. Nous continuons de nous distinguer de nos concurrents par nos produits, par notre politique tarifaire ou encore par le ton employé avec nos abonnés. Cette différence a aussi construit la grande entreprise que nous somme

Connecting Nation. Accelerating Indonesia's Future. As Indonesia's leading digital telecommunications company, Telkomsel is committed to building a connected, competitive, and future-ready society. For over 29 years, we've empowered individuals, homes, and businesses with innovative connectivity an

PT Telkom Indonesia (Persero) Tbk (Telkom) is a state-owned information and communications technology enterprise and telecommunications network in Indonesia. The Government of Indonesia is the majority shareholder with 52.09 percent shares while the remaining 47.91 percent shares belong to public sh

TM is the national connectivity and digital infrastructure provider and Malaysia’s leading integrated telco; offering a comprehensive suite of communication services and solutions in fixed (telephony and broadband), mobility, content, WiFi, ICT, Cloud and smart services. TM is driven by stakeholder

Telkom Business is the business unit dedicated to serving businesses of every type, industry and size in and outside South Africa. The businesses that we serve range from small and medium enterprises (SMEs) to large corporations, government organisations and global enterprises. A sub-brand of the

Vodafone Idea Limited is an Aditya Birla Group and Vodafone Group partnership. It is India’s leading telecom service provider. The Company provides pan India Voice and Data services across 2G, 3G and 4G platform. With the large spectrum portfolio to support the growing demand for data and voice, the
Our adventure began by changing the way people watched TV, bringing DISH to where big cable wouldn’t: rural America. Since then, we have reinvented ourselves and our own industry with Sling TV to give millions of consumers more choice in entertainment. Today, we’ve officially entered the consumer wi

VEON is a global digital operator headquartered in Dubai, providing connectivity and digital services across dynamic frontier markets that are home to more than 6% of the world’s population. With our digital operators, we transform lives through technology-driven services that empower millions and
.png)
Earlier this month, Lumen Technologies announced the launch of its Defender Advanced Managed Detection and Response (AMDR) solution with...
Lumen Technologies (LUMN) is making headlines with the launch of a new cybersecurity solution in collaboration with Microsoft as well as a...
Lumen Technologies reports it has achieved the Palo Alto Networks NextWave Cortex XSIAM Select Specialisation Status in Singapore.
The tech layoff wave is still kicking in 2025. Last year saw more than 150,000 job cuts across 549 companies, according to independent...
Vancouver, Kelowna, and Delta, British Columbia--(Newsfile Corp. - October 2, 2025) - Investorideas.com, a global news source and expert...
Investorideas.com highlights key trends shaping the telecom sector, with artificial intelligence (AI) and cybersecurity emerging as pivotal...
AI and cybersecurity are reshaping the telecom sector. Discover top stocks to watch including IQSTEL, Palantir, Netskope, Macquarie,...
Secure your digital environments, reduce costs and improve strategy with award-winning cybersecurity services and network security solutions from Lumen.
AI is reshaping cybersecurity through smarter detection, resilient architecture, and rapid response across hybrid environments.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Lumen Technologies is http://www.lumen.com.
According to Rankiteo, Lumen Technologies’s AI-generated cybersecurity score is 754, reflecting their Fair security posture.
According to Rankiteo, Lumen Technologies currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Lumen Technologies is not certified under SOC 2 Type 1.
According to Rankiteo, Lumen Technologies does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Lumen Technologies is not listed as GDPR compliant.
According to Rankiteo, Lumen Technologies does not currently maintain PCI DSS compliance.
According to Rankiteo, Lumen Technologies is not compliant with HIPAA regulations.
According to Rankiteo,Lumen Technologies is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Lumen Technologies operates primarily in the Telecommunications industry.
Lumen Technologies employs approximately 49,694 people worldwide.
Lumen Technologies presently has no subsidiaries across any sectors.
Lumen Technologies’s official LinkedIn profile has approximately 586,657 followers.
Lumen Technologies is classified under the NAICS code 517, which corresponds to Telecommunications.
No, Lumen Technologies does not have a profile on Crunchbase.
Yes, Lumen Technologies maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/lumentechnologies.
As of November 27, 2025, Rankiteo reports that Lumen Technologies has experienced 3 cybersecurity incidents.
Lumen Technologies has an estimated 9,535 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach, Ransomware and Data Leak.
Detection and Response: The company detects and responds to cybersecurity incidents through an communication strategy with centurylink informed affected customers, and remediation measures with developed improved security software, and remediation measures with customer notifications (via mail), and communication strategy with written notifications to affected customers..
Title: CenturyLink Customer Data Exposure
Description: The personal information of hundreds of thousands of CenturyLink customers, including names, addresses, email addresses, and phone numbers was exposed online.
Type: Data Breach
Title: Ransomware Attack on Lumen Technologies
Description: Lumen Technologies, a leading provider of telecommunications services, identified two cybersecurity issues, including a ransomware attack. One of the events involved a ransomware attack on a small number of its servers that operate a segmented hosting service. The corporation simply acknowledged that the issue 'is currently impairing the operations of a small number of the Company's enterprise customers.' It gave no further information regarding the family of ransomware that infected its systems. Lumen developed improved security software following the ransomware attack's detection, which enabled the business to identify a different incursion.
Type: Ransomware
Title: CenturyLink Communications Data Breach (2020)
Description: The Maine Office of the Attorney General reported a data breach involving CenturyLink Communications, with the breach occurring between August 20 and August 31, 2020. Approximately 1,942 accounts were affected due to a sophisticated password guessing attack on the MyCenturyLink customer account website, potentially exposing usernames, email addresses, first and last names, service and billing addresses, and other related information. Written notifications were sent to customers starting September 21, 2020, with all letters mailed by September 25, 2020.
Date Publicly Disclosed: 2020-09-21
Type: Data Breach
Attack Vector: Password Guessing Attack
Vulnerability Exploited: Weak or Reused Passwords
Common Attack Types: The most common types of attacks the company has faced is Data Leak.
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through MyCenturyLink Customer Account Website.

Data Compromised: Names, Addresses, Email addresses, Phone numbers, Account-specific information
Systems Affected: database

Systems Affected: Segmented hosting service servers
Operational Impact: Impairing the operations of a small number of the Company's enterprise customers

Data Compromised: Usernames, Email addresses, First and last names, Service addresses, Billing addresses, Other related information
Systems Affected: MyCenturyLink Customer Account Website
Identity Theft Risk: Potential
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personal Information, Account-Specific Information, , Usernames, Email Addresses, First And Last Names, Service Addresses, Billing Addresses, Other Related Information and .

Entity Name: CenturyLink
Entity Type: Corporation
Industry: Telecommunications
Customers Affected: hundreds of thousands

Entity Name: Lumen Technologies
Entity Type: Corporation
Industry: Telecommunications
Customers Affected: Small number of enterprise customers

Entity Name: CenturyLink Communications (now Lumen Technologies)
Entity Type: Telecommunications Company
Industry: Telecommunications
Location: United States
Customers Affected: 1,942

Communication Strategy: CenturyLink informed affected customers

Remediation Measures: Developed improved security software

Remediation Measures: Customer Notifications (via mail)
Communication Strategy: Written Notifications to Affected Customers

Type of Data Compromised: Personal information, Account-specific information
Number of Records Exposed: 2.8 million
File Types Exposed: API logs
Personally Identifiable Information: namesaddressesemail addressesphone numbers

Type of Data Compromised: Usernames, Email addresses, First and last names, Service addresses, Billing addresses, Other related information
Number of Records Exposed: 1,942
Sensitivity of Data: Moderate (PII)
Data Exfiltration: Potential
Personally Identifiable Information: Yes
Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Developed improved security software, , Customer Notifications (via mail), .

Regulatory Notifications: Maine Office of the Attorney General

Source: Maine Office of the Attorney General
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Maine Office of the Attorney General.
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through CenturyLink informed affected customers and Written Notifications To Affected Customers.

Customer Advisories: CenturyLink informed affected customers

Customer Advisories: Written notifications sent between September 21–25, 2020
Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were CenturyLink informed affected customers, Written Notifications Sent Between September 21–25, 2020 and .

Entry Point: MyCenturyLink Customer Account Website

Root Causes: Weak Or Reused Passwords Vulnerable To Guessing Attacks,
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2020-09-21.
Most Significant Data Compromised: The most significant data compromised in an incident were names, addresses, email addresses, phone numbers, account-specific information, , Usernames, Email Addresses, First and Last Names, Service Addresses, Billing Addresses, Other Related Information and .
Most Significant System Affected: The most significant system affected in an incident was database and Segmented hosting service servers and MyCenturyLink Customer Account Website.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Service Addresses, Billing Addresses, First and Last Names, account-specific information, Usernames, email addresses, names, addresses, phone numbers, Email Addresses and Other Related Information.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 2.8M.
Most Recent Source: The most recent source of information about an incident is Maine Office of the Attorney General.
Most Recent Customer Advisory: The most recent customer advisory issued were an CenturyLink informed affected customers, Written notifications sent between September 21–25 and 2020.
Most Recent Entry Point: The most recent entry point used by an initial access broker was an MyCenturyLink Customer Account Website.
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.