Merative A.I CyberSecurity Scoring
Merative
Company Information
Website:http://Merative.com
Employees number:1,565
Number of followers:70,917
NAICS:5415
Industry Type:IT Services and IT Consulting
Homepage:Merative.com
Merative Risk Score (AI oriented)
Between 750 and 799
MerativeIT Services and IT Consulting
Updated:
05/06/2026
05/06/2026
759/1000
Fair
Baa
Merative Global Score (TPRM)
xxxx
MerativeIT Services and IT Consulting
Score locked

MerativeFair
Current Score
759Baa (FAIR)
01000
1 incidents
0 avg impact
Incident timeline with MITRE ATT&CK tactics, techniques, and mitigations.
JUNE 2026
759
MAY 2026
759
APRIL 2026
759
MARCH 2026
759
FEBRUARY 2026
759
JANUARY 2026
759
DECEMBER 2025
759
NOVEMBER 2025
759
OCTOBER 2025
759
SEPTEMBER 2025
759
AUGUST 2025
759
JULY 2025
759
JANUARY 2013
760
Cyber Attack
01 Jan 2013 • Merative
IBM and Truven: Former cyber executive turned whistleblower accuses IBM of covering up several data breaches
Alleged Decade-Long Cover-Up of State-Sponsored Cyberattacks on IBM
743
CRITICAL-17
MERIBM1780698286
Former IBM Executive Alleges Decade-Long Cover-Up of State-Sponsored Cyberattacks
A recently unsealed 2020 lawsuit filed by William Barlow, IBM’s former vice president of threat intelligence, accuses the company of concealing multiple cyber breaches including attacks by foreign governments over the past decade. Barlow, who left IBM in August 2019, claims the tech giant failed to disclose breaches of its core network and subsidiaries, despite evidence of extensive compromise.
The lawsuit centers on a 2013–2016 campaign attributed to APT 10, a Chinese state-linked hacking group indicted by the U.S. in 2018. According to Barlow, intelligence officials from the Five Eyes alliance (U.S., U.K., Canada, Australia, and New Zealand) warned IBM of the breach in March 2017, prompting an internal investigation. The probe found that APT 10 potentially breached IBM’s network over 56,000 times, compromising 400 accounts and nearly 200 systems across 18 countries and multiple business units. However, IBM allegedly did not retain access logs, hindering further investigation.
Barlow further alleges that IBM never notified government authorities or customers, including the U.S. federal government a major IBM client. The complaint describes IBM’s infrastructure as outdated and vulnerable, with hackers moving undetected across its systems. Additionally, Barlow claims breaches at two IBM subsidiaries: Trusteer (a cybersecurity firm acquired in 2013) in 2018 and Truven (a healthcare data company acquired in 2016), which was allegedly breached multiple times post-acquisition.
IBM has denied wrongdoing, stating the lawsuit is six years old and that the U.S. Department of Justice declined to intervene. The company maintains it acted within the law. Barlow’s lawyer has indicated plans to aggressively litigate the case, framing the allegations as incompatible with IBM’s role as a federal cybersecurity vendor.
The case highlights concerns over undisclosed breaches at major tech firms, even as stricter data breach notification laws have been enacted in recent years.
INCIDENT DETAILS -
TYPE
MOTIVATION
IMPACT
DATA BREACH
REFERENCES
Frequently Asked Questions
?
What is the current A.I Rankiteo Cyber Score for Merative ??
What was Merative's A.I Rankiteo Cyber Score in May 2026 ??
What was Merative's A.I Rankiteo Cyber Score in April 2026 ??
What was Merative's A.I Rankiteo Cyber Score in March 2026 ??
What was Merative's A.I Rankiteo Cyber Score in February 2026 ??
What was Merative's A.I Rankiteo Cyber Score in January 2026 ??
What was Merative's A.I Rankiteo Cyber Score in December 2025 ??
What was Merative's A.I Rankiteo Cyber Score in November 2025 ??
What was Merative's A.I Rankiteo Cyber Score in October 2025 ??
What was Merative's A.I Rankiteo Cyber Score in September 2025 ??
What was Merative's A.I Rankiteo Cyber Score in August 2025 ??
What was Merative's A.I Rankiteo Cyber Score in July 2025 ??
What is the average per-incident point impact on Merative's A.I Rankiteo Cyber Score over the past 12 months ??
Where can I access detailed records of all cyber incidents associated with Merative ??
Where can I find a summary of the A.I Rankiteo Risk Scoring methodology ??
Where can I view Merative's profile page on Rankiteo ??
How accurate is the A.I Rankiteo Risk Scoring methodology ?