What is the official website of Mastercard ?

The official website of Mastercard is http://www.mastercard.com.

What is Mastercard's cybersecurity risk score?

Mastercard has an AI-generated cybersecurity risk score of 832 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Mastercard experienced?

According to Rankiteo, Mastercard currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Mastercard been affected by any supply chain cyber incidents ?

According to Rankiteo, Mastercard has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Mastercard have SOC 2 Type 1 certification ?

According to Rankiteo, Mastercard is not certified under SOC 2 Type 1.

Does Mastercard have SOC 2 Type 2 certification ?

According to Rankiteo, Mastercard does not hold a SOC 2 Type 2 certification.

Does Mastercard comply with GDPR ?

According to Rankiteo, Mastercard is not listed as GDPR compliant.

Does Mastercard have PCI DSS certification ?

According to Rankiteo, Mastercard does not currently maintain PCI DSS compliance.

Does Mastercard comply with HIPAA ?

According to Rankiteo, Mastercard is not compliant with HIPAA regulations.

Does Mastercard have ISO 27001 certification ?

According to Rankiteo,Mastercard is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Mastercard operate in ?

Mastercard operates primarily in the IT Services and IT Consulting industry.

How many employees does Mastercard have ?

Mastercard employs approximately 46,686 people worldwide.

Does Mastercard own any subsidiaries ?

Mastercard presently has no subsidiaries across any sectors.

How many LinkedIn followers does Mastercard have ?

Mastercard's official LinkedIn profile has approximately 2,202,355 followers.

What is the NAICS classification code for Mastercard ?

Mastercard is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Mastercard have a Crunchbase profile ?

No, Mastercard does not have a profile on Crunchbase.

Does Mastercard have a LinkedIn profile ?

Yes, Mastercard maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mastercard.

How many cybersecurity incidents has Mastercard experienced ?

As of July 30, 2026, Rankiteo reports that Mastercard has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Mastercard have ?

Mastercard has an estimated 41,199 peer or competitor companies worldwide.

What types of cybersecurity incidents has Mastercard faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack and Data Leak.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Mastercard

Boost Score +25 with badge (5 left)

832

/1000

Good

857

/1000

Very Good

Mastercard Vendor Cyber Rating & Cyber Score

mastercard.com

Add Your Compliance Badge

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re building a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Mastercard A.I CyberSecurity Scoring

Scoring History

Mastercard

Mastercard CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Mastercard Cybersec...

Cyber Attack

10/2024

MASBRA176923618...

Mastercard

Data Leak

08/2019

MAS05510423

Loading…

A.I.

Mastercard Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Mastercard

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Mastercard in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Mastercard in 2026.

Incident Types Mastercard vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Mastercard in 2026.

Incident History - Mastercard (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Mastercard Subsidiaries

Mastercard

IT Services and IT Consulting

Website: http://www.mastercard.com

Company Size: 10,000+ employees

Mastercard Global PartnershipsFinancial Services

Mastercard Data & ServicesIT Services and IT Consulting

Mastercard GatewayIT Services and IT Consulting

Dynamic Yield by MastercardSoftware Development

Mastercard Cyber and IntelligenceFinancial Services

Mastercard for GovernmentFinancial Services

TrūataData Infrastructure and Analytics

Betalingsservice Finansielle tjenesteydelser

Mastercard Academy LACInternet Publishing

Mastercard Center for Inclusive GrowthFinancial Services

Mastercard Academy EuropeFinancial Services

Loading…

Mastercard Similar Companies

HGS

hgs.cx

A global leader in optimizing the customer experience lifecycle, digital transformation, and business process management, HGS is helping its clients become more competitive every day. HGS combines automation, analytics, and artificial intelligence with deep domain expertise focusing on digital customer experiences, back-office processing, contact centers, and HRO solutions. Part of the multi-billion-dollar conglomerate Hinduja Group, HGS takes a “globally local” approach with over 18,000+ employees across 38 delivery centers in 9 countries.

Avanade

bit.ly

Avanade is the world’s leading expert on Microsoft. Trusted by over 7,000 clients worldwide, we deliver AI-driven solutions that unlock the full potential of people and technology, optimize operations, foster innovation and drive growth. As Microsoft’s Global SI Partner we combine global scale with local expertise in AI, cloud, data analytics, cybersecurity, and ERP to design solutions that prioritize people and drive meaningful impact. We champion diversity, inclusion, and sustainability, ensuring our work benefits society and business.

LexisNexis

cb lexisnexis.com

LexisNexis is a leading innovator of private, secure, and authoritative Legal AI solutions that help legal and business professionals draft full documents with ease, make informed decisions faster, and deliver outstanding work and improved outcomes, all powered by trusted content. LexisNexis Legal & Professional serves customers in more than 150 countries with 11,800 employees worldwide, and is part of RELX, a global provider of information-based analytics and decision tools for professional and business customers.

Neobpo

www.neobpo

Somos especializados em integrar tecnologia com inteligência humana, oferecendo soluções digitais que promovem transformação e eficiência operacional. Nosso foco é gerar valor por meio de resultados reais, utilizando inteligência digital para atender às necessidades específicas de cada cliente. Mergulhamos nos desafios de empresas que buscam inovação, modernização e escalabilidade, oferecendo soluções seguras e personalizadas para impulsionar seu crescimento. Adotamos uma abordagem consultiva ao longo de toda a jornada, identificando oportunidades estratégicas desde o primeiro contato, proporcionando soluções sob medida que combinam dados, automação e atendimento dedicado. O impacto que geramos vai além da entrega de resultados. Transformamos a forma como nossos clientes operam, melhorando sua produtividade, segurança e escalabilidade, garantindo um crescimento sustentável e criando valor mensurável para seus negócios.

NTT DATA Business Solutions

nttdata-solutions.com

We understand the business of our clients and know what it takes to transform it into the future. At NTT DATA Business Solutions, we drive innovation – from advisory and implementation to managed services and beyond. With SAP at our core and a powerful ecosystem of partners, we continuously improve solutions and technology to make them work for companies – and for their people. Aiming to transform, grow and become more successful? We provide you with more than in-depth expertise for SAP solutions: As your passionate partner, we connect your business opportunities with the latest technologies – and offer you a unique approach to get the job done as smoothly as possible. Our close ties to our partners give you access to innovative solutions and developments. Being part of the global NTT DATA group enables us to master any scope of project. With operations in more than 30 countries, we have enabled thousands of companies become more efficient and effective during the last three decades. Our more than 16,000 experts around the world will also accompany you on your journey toward a truly intelligent enterprise – wherever you want to start!

SoftwareOne

softwareone.com

SoftwareOne is a global software and cloud solutions provider. With a presence in over 70 countries and a team of around 13,000 professionals, we combine global scale and local expertise to help clients optimize costs, accelerate growth, and navigate complex IT environments with confidence. Leveraging deep capabilities in cloud, software, and data and AI, the company empowers organizations to modernize, innovate, and unlock the full value of their technology investments. Headquartered in Switzerland, SoftwareOne is listed on the SIX Swiss Exchange and Euronext Oslo Børs under the ticker symbol SWON. Visit us: https://www.softwareone.com/en

Nagarro

cb nagarro.com

Nagarro helps future-proof your business through a forward-thinking, fluidic, and CARING mindset. We excel at digital engineering and help our clients become human-centric, digital-first organizations, augmenting their ability to be responsive, efficient, intimate, creative, and sustainable. Today, we are 18,000+ experts across 38 countries, forming a Nation of Nagarrians, ready to help our customers succeed.

Infosys BPM

infosysbpm.com

Infosys BPM Ltd., the business process management subsidiary of Infosys Ltd. (NYSE: INFY), was set up in April 2002. Infosys BPM focuses on integrated end-to-end outsourcing and delivers transformational benefits to its clients through reduced costs, ongoing productivity improvements, and process re-engineering. Infosys BPM operates in India, Poland, the Czech Republic, the Netherlands, Ireland, South Africa, Brazil, Mexico, Costa Rica, the United States, Puerto Rico, China, the Philippines, Singapore, and Australia. Infosys BPM has been consistently ranked among the leading BPM companies and has received over 60 awards and recognitions in the last 5 years from key industry bodies and forums like the International Association of Outsourcing Professionals, Outsourcing Center, SSON, and NOA, among others. Infosys BPM also has very robust people practices, as substantiated by the various HR-specific awards it has won over the years. The company has consistently been ranked among the top employers of choice, on the basis of its industry-leading HR best practices. The company’s senior leaders contribute widely to industry forums as BPO strategists.

Cognizant

cognizant.ai

Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value. We build full-stack AI solutions powered by deep industry, process and engineering expertise — embedding an organization's unique context into technology systems that amplify human potential and drive tangible outcomes. From strategy to deployment, we help global enterprises move from AI ambition to AI impact and stay ahead in a fast-changing world. See how at cognizant.ai | Follow us @cognizant

Loading…

NEWS

Mastercard CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

June 25, 2026 08:57 AM

SAIT and Mastercard launch free cybersecurity course for small Canadian businesses and non-profits.

The Southern Alberta Institute of Technology (SAIT) and Mastercard have partnered to offer a free 10-week cybersecurity course aimed at...

Read Article

June 24, 2026 04:27 PM

New SAIT and Mastercard partnership targets cybersecurity gaps facing Canada’s small businesses and non-profits

Calgary, Alberta, Canada, June 24, 2026 (GLOBE NEWSWIRE) -- The Southern Alberta Institute of Technology (SAIT) and Mastercard are...

Read Article

June 17, 2026 12:16 PM

Middle East conflict triggered 198% spike in cyber threats, Mastercard says

Cyberattacks across Eastern Europe, the Middle East and Africa (EEMEA) increased by 13% over the past year, with geopolitical conflicts,...

Read Article

June 10, 2026 07:00 AM

Mastercard reports rise in cyberattacks in Eastern Europe, with Ukraine among main targets

Mastercard's first edition of the Cyber Pulse report indicates that since the start of 2026, cybercrime levels have risen significantly...

Read Article

June 09, 2026 07:00 AM

ZAWYA: Mastercard cyber pulse report reveals how strengthening digital resilience supports economic continuity

Dubai, UAE: Mastercard released its inaugural Cyber Pulse report, offering a comprehensive view of the evolving cyber threat landscape...

Read Article

June 09, 2026 07:00 AM

Securing Saudi Arabia’s digital economy

As Executive Vice President and Division President of West Arabia, Adam Jones oversees Mastercard's operations across Saudi Arabia, Kuwait,

Read Article

May 21, 2026 07:00 AM

How is Mastercard's New Trust Platform Combatting Scams?

Real-time signals for issuers. Alongside Merchant Trust Services, Mastercard is also launching the Merchant Scam & Risk Indicator (MSRI),...

Read Article

May 21, 2026 07:00 AM

How cybersecurity must evolve for the age of agentic AI

Mythos has provided the cybersecurity industry with a vital reminder that dynamics have drastically changed. In this new agentic era, the...

Read Article

May 19, 2026 07:00 AM

Mastercard Intros Strategy to Ferret Out Scam Merchants

Mastercard's Merchant Trust Services is a new strategy that distinguishes real merchants from risky ones, both on and offline.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-67595

SUMMARY

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing remote attackers to execute unauthorized code in any browser that renders the affected email template with JavaScript enabled. The payload establishes a WebSocket connection to a hardcoded command-and-control endpoint, installs a password-field keylogger using MutationObserver to capture dynamically added inputs, scrapes WhatsApp Web DOM content, and accepts remote commands to redirect or overwrite the rendered page.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.2

REFERENCES

CVE-2026-15157

SUMMARY

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, an application that passes a hand-rolled blob-like body (via request, stream, pipeline, or dispatch) whose type is derived from untrusted input allows an attacker to inject CRLF sequences and append arbitrary HTTP headers, potentially smuggling a second request past the upstream. Native Blob objects are safe because their constructor strips CRLF from the type, and fetch is unaffected because it validates headers, but ecosystem libraries that build duck-typed blob shapes from user input can reach the vulnerable path. This is the same defect class as CVE-2022-35948 and CVE-2026-1527, on a header sink that the earlier fixes did not cover. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-14643

SUMMARY

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to before 7.29.0 and from 8.0.0 up to before 8.9.0, the parser either drops the directive or stores a field name with literal quote characters, so the cache decision fails to recognize the qualification and the response is stored. In shared-cache mode, this lets a response containing one user's authenticated data be served from cache to a later caller, including an unauthenticated one, when both requests resolve to the same cache key. It affects applications that enable the cache interceptor in shared mode, forward Authorization headers upstream, and receive cacheable responses with qualified directives padded with whitespace around the equals sign. This is the whitespace-around-equals variant that the fix for CVE-2026-9678 did not normalize, and it is fixed in undici 7.29.0 and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2025-69949

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2025-69945

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/hospitalmanagementsystemproject/20250811-hospital-management-system-edit-patient.php-editid-sqli/20250811-hospital-management-system-edit-patient.php-editid-sqli.md

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…