Company Details
mcgrath-rentcorp
942
3,827
53
mgrc.com
0
MCG_1661582
In-progress

McGrath RentCorp Company CyberSecurity Posture
mgrc.comMcGrath might be the best company you’ve never heard of! What started as a small business over 45 years ago has blossomed into a $900M+ industry leader with 1,200+ employees, five dynamic business units, and a strong presence across multiple industries. As a publicly traded company (NASDAQ: MGRC), we’ve built our success on innovation, strong values, and an exceptional team. Through it all, we’ve stayed true to our roots, maintaining a close-knit culture that’s hard to find in companies our size. Our people are the heart of our success, and we value those who bring fresh ideas, build meaningful partnerships, and thrive in a dynamic work environment. If you're looking for a stable, growing company where you can truly make a real difference, we’d love to hear from you!
Company Details
mcgrath-rentcorp
942
3,827
53
mgrc.com
0
MCG_1661582
In-progress
Between 700 and 749

McGrath RentCorp Global Score (TPRM)XXXX

Description: The California Office of the Attorney General reported that McGrath RentCorp experienced a data breach on July 17, 2021. Approximately 11,000 individuals may have had their personal information compromised, including names, addresses, social security numbers, and health-related information. Notification of the incident was issued on December 15, 2021.


No incidents recorded for McGrath RentCorp in 2025.
No incidents recorded for McGrath RentCorp in 2025.
No incidents recorded for McGrath RentCorp in 2025.
McGrath RentCorp cyber incidents detection timeline including parent company and subsidiaries

McGrath might be the best company you’ve never heard of! What started as a small business over 45 years ago has blossomed into a $900M+ industry leader with 1,200+ employees, five dynamic business units, and a strong presence across multiple industries. As a publicly traded company (NASDAQ: MGRC), we’ve built our success on innovation, strong values, and an exceptional team. Through it all, we’ve stayed true to our roots, maintaining a close-knit culture that’s hard to find in companies our size. Our people are the heart of our success, and we value those who bring fresh ideas, build meaningful partnerships, and thrive in a dynamic work environment. If you're looking for a stable, growing company where you can truly make a real difference, we’d love to hear from you!


The Colas Group is a global leader in the construction and maintenance of transport infrastructure. Our mission is to design, build and maintain sustainable transport infrastructure from our local roots, around the world 🌍 Our three main activities are roads (our core business), materials and railw
Founded in 1952 by Francis Bouygues, Bouygues is a diversified services group operating in over 80 countries with 200,000 employees all working to make life better every day. Its business activities in construction (Bouygues Construction, Bouygues Immobilier, Colas); energies & services (Equans); me
Fluor Corporation is a global engineering, procurement and construction company. We work with leaders in the energy, infrastructure, life sciences, advanced technologies, mining and metals industries, as well as government agencies, to build a better world. Since our founding in 1912, we have been

Taisei Corporation (大成建設株式会社) is one of the oldest and largest Japanese General Construction Contractors and a major International General Contractor. The main areas of business are building construction, civil engineering, and real estate development. Taisei Corporation's head office is in Shinj
As North America’s largest equipment rental company, with 1500+ stores in the United States and Canada, we serve construction and industrial companies, utilities, municipalities, homeowners, and communities, with the goal of fulfilling customer needs and surpassing expectations. We go beyond equipm
Tata Projects is one of the most admired Technology led Engineering, Procurement and Construction (EPC) companies in India. We have expertise in providing sustainable solutions in the execution of large and complex urban and industrial infrastructure projects while also demonstrating strong presence
.png)
CyberTech Tel Aviv is an opportunity for Mexican firms to access to cutting-edge cybersecurity, AI, and supply-chain technologies,...
The collaboration focuses on three major digital transformation projects that merge Vodafone Qatar's network strengths with Microsoft's...
By Ajong Mbapndah L. A proactive cybersecurity culture begins with leadership commitment, continuous education, and regional solidarity,...
The UAE Cybersecurity Council and QuantumGate, a subsidiary of VentureOne, will deepen national preparedness by accelerating the UAE's.
Entering the new year with a robust cybersecurity strategy is essential. Threats are growing more sophisticated, often leveraging AI to craft...
As human-free cybercrime and AI agents redefine digital threats, Mexico must modernize cybersecurity to address new risks, writes Oscar...
Artificial intelligence is changing how enterprises defend digital systems. It no longer acts as an optional tool but as a key part of daily...
The FDA's cybersecurity dictates around premarket applications' have been in effect since 2023, with more post-market oversight expected...
Ahead of Cyber Monday, picks highlight long-term cybersecurity potential as CRWD, QLYS and CYBR leverage rising demand for advanced...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of McGrath RentCorp is http://www.mgrc.com/.
According to Rankiteo, McGrath RentCorp’s AI-generated cybersecurity score is 739, reflecting their Moderate security posture.
According to Rankiteo, McGrath RentCorp currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, McGrath RentCorp is not certified under SOC 2 Type 1.
According to Rankiteo, McGrath RentCorp does not hold a SOC 2 Type 2 certification.
According to Rankiteo, McGrath RentCorp is not listed as GDPR compliant.
According to Rankiteo, McGrath RentCorp does not currently maintain PCI DSS compliance.
According to Rankiteo, McGrath RentCorp is not compliant with HIPAA regulations.
According to Rankiteo,McGrath RentCorp is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
McGrath RentCorp operates primarily in the Real Estate and Equipment Rental Services industry.
McGrath RentCorp employs approximately 942 people worldwide.
McGrath RentCorp presently has no subsidiaries across any sectors.
McGrath RentCorp’s official LinkedIn profile has approximately 3,827 followers.
McGrath RentCorp is classified under the NAICS code 53, which corresponds to Real Estate and Rental and Leasing.
Yes, McGrath RentCorp has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/mcgrath-rentcorp.
Yes, McGrath RentCorp maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mcgrath-rentcorp.
As of November 27, 2025, Rankiteo reports that McGrath RentCorp has experienced 1 cybersecurity incidents.
McGrath RentCorp has an estimated 13 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Title: McGrath RentCorp Data Breach
Description: The California Office of the Attorney General reported that McGrath RentCorp experienced a data breach on July 17, 2021. Approximately 11,000 individuals may have had their personal information compromised, including names, addresses, social security numbers, and health-related information. Notification of the incident was issued on December 15, 2021.
Date Detected: 2021-07-17
Date Publicly Disclosed: 2021-12-15
Type: Data Breach
Common Attack Types: The most common types of attacks the company has faced is Breach.

Data Compromised: Names, Addresses, Social security numbers, Health-related information
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Names, Addresses, Social Security Numbers, Health-Related Information and .

Entity Name: McGrath RentCorp
Entity Type: Company
Customers Affected: 11000

Type of Data Compromised: Names, Addresses, Social security numbers, Health-related information
Number of Records Exposed: 11000
Sensitivity of Data: High

Source: California Office of the Attorney General
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney General.
Most Recent Incident Detected: The most recent incident detected was on 2021-07-17.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2021-12-15.
Most Significant Data Compromised: The most significant data compromised in an incident were names, addresses, social security numbers, health-related information and .
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were social security numbers, health-related information, addresses and names.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 110.0.
Most Recent Source: The most recent source of information about an incident is California Office of the Attorney General.
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.