What is the official website of MFS Investment Management ?

The official website of MFS Investment Management is http://www.mfs.com.

What is MFS Investment Management's cybersecurity risk score?

MFS Investment Management has an AI-generated cybersecurity risk score of 759 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has MFS Investment Management experienced?

According to Rankiteo, MFS Investment Management currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has MFS Investment Management been affected by any supply chain cyber incidents ?

According to Rankiteo, MFS Investment Management has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does MFS Investment Management have SOC 2 Type 1 certification ?

According to Rankiteo, MFS Investment Management is not certified under SOC 2 Type 1.

Does MFS Investment Management have SOC 2 Type 2 certification ?

According to Rankiteo, MFS Investment Management does not hold a SOC 2 Type 2 certification.

Does MFS Investment Management comply with GDPR ?

According to Rankiteo, MFS Investment Management is not listed as GDPR compliant.

Does MFS Investment Management have PCI DSS certification ?

According to Rankiteo, MFS Investment Management does not currently maintain PCI DSS compliance.

Does MFS Investment Management comply with HIPAA ?

According to Rankiteo, MFS Investment Management is not compliant with HIPAA regulations.

Does MFS Investment Management have ISO 27001 certification ?

According to Rankiteo,MFS Investment Management is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does MFS Investment Management operate in ?

MFS Investment Management operates primarily in the Investment Management industry.

How many employees does MFS Investment Management have ?

MFS Investment Management employs approximately 2,854 people worldwide.

Does MFS Investment Management own any subsidiaries ?

MFS Investment Management presently has no subsidiaries across any sectors.

How many LinkedIn followers does MFS Investment Management have ?

MFS Investment Management's official LinkedIn profile has approximately 88,532 followers.

What is the NAICS classification code for MFS Investment Management ?

MFS Investment Management is classified under the NAICS code 5239, which corresponds to Other Financial Investment Activities.

Does MFS Investment Management have a Crunchbase profile ?

No, MFS Investment Management does not have a profile on Crunchbase.

Does MFS Investment Management have a LinkedIn profile ?

Yes, MFS Investment Management maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mfs-investment-management.

How many cybersecurity incidents has MFS Investment Management experienced ?

As of July 2, 2026, Rankiteo reports that MFS Investment Management has not experienced any cybersecurity incidents.

How many peer or competitor companies does MFS Investment Management have ?

MFS Investment Management has an estimated 5,364 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

MIM

Boost Score +25 with badge (5 left)

759

/1000

Fair

784

/1000

Fair

MFS Investment Management Vendor Cyber Rating & Cyber Score

mfs.com

Add Your Compliance Badge

In 1924, MFS launched the US’ first open-end mutual fund. One hundred years later, as a full-service global investment manager serving financial advisors, intermediaries and institutional clients, we celebrate a century of active management. Our time-tested investing approach combines collective expertise, long-term discipline and thoughtful risk management to uncover what we believe are the best investment opportunities in the market. Learn more about our Social Media Terms of Use here: (paste link into browser) www.mfs.com/Literms For current career opportunities visit www.mfs.com/careers MFS Investment Management is an Equal Opportunity Employer.

MIM A.I CyberSecurity Scoring

Scoring History

MIM

MFS Investment Management CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

MIM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for MIM

Incidents vs Investment Management Industry Avg (This Year)

No incidents recorded for MFS Investment Management in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for MFS Investment Management in 2026.

Incident Types MIM vs Investment Management Industry Avg (This Year)

No incidents recorded for MFS Investment Management in 2026.

Incident History - MIM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

MFS Investment Management Subsidiaries

Parent Company

MIM

Investment Management

Website: http://www.mfs.com

Company Size: 2,854

No subsidiary data available for this company.

Loading…

MFS Investment Management Similar Companies

Odebrecht

novonor.com.br

Founded in 1944, Odebrecht is a Brazilian group with diverse businesses and world-class standards of quality. Its Members, guided by the Group’s own philosophy, the Odebrecht Entrepreneurial Technology (TEO), provide services and manufacture products for clients on five continents. As part of their entrepreneurial responsibility while serving clients and local communities, they contribute to the development of economically prosperous, socially just, environmentally sustainable, politically inclusive and culturally rich societies and countries.

Sonae

sonae.pt

Sonae exists to create a lasting positive impact on businesses, people, communities and on the planet. Managing a diverse portfolio of businesses in retail, financial services, technology, investments, real estate and telecommunications, Sonae makes the most of its expertise and pushes itself to create the future we all want and need. Creating today a better tomorrow, for all.

Essar

essar.com

Essar, with an entrepreneurial track record spanning 50+ years, specialises in investing and developing assets to create value in core sectors such as Energy, Infrastructure, Metals & Mining, and Technology & Retail. With a presence in eight countries, Essar generates revenues of US$15 billion and provides employment for over 7,000 people. Over the past five years, Essar has strategically rebalanced its portfolio by monetising some world-class assets. Essar is now positioned to transition its existing assets to a greener regime and invest in businesses driving the transformation of sector landscapes from carbon-centric to a clean energy ecosystem, both nationally and globally. The Group is developing sustainable assets and industry ecosystems, with a particular focus on hydrogen, green mobility, and green steel. Essar Foundation, the CSR arm of Essar, has a rich 50-year heritage of service across India, focusing on areas such as health, education, livelihood, women empowerment, sports, environment, and infrastructure.

Ackermans & van Haaren

avh.be

Ackermans & van Haaren is a diversified group active in 4 core sectors: Marine Engineering & Contracting (DEME, one of the largest dredging companies in the world - CFE, a construction group with headquarters in Belgium), Private Banking (Delen Private Bank, one of the largest independent private asset managers in Belgium, and asset manager JM Finn in the UK - Bank J.Van Breda & C°, niche bank for entrepreneurs and liberal professions in Belgium), Real Estate & Senior Care (Nextensa, a Euronext-listed land and real estate developer focused on Belgium and Luxembourg) and Energy & Resources (SIPEF, an agro-industrial group in tropical agriculture). In 2023, through its share in its participations, the AvH group represented a turnover of 6.5 billion euros and employed 21,887 people. The group concentrates on a limited number of strategic participations with significant potential for growth. The AvH share is part of the BEL20 index, the BEL-ESG index of Euronext Brussels and the European DJ Stoxx 600.

Sabanci Holding

sabanci.com

Sabancı Holding is one of Turkey’s leading conglomerate, engaged in a wide variety of business activities through its subsidiaries and affiliates, mainly in the banking, financial services, energy, industrials, building materials and retail sectors. Our Group companies most of which are leaders in their respective sectors. As Sabancı Group, we position ourselves in new economy, with global partnerships, employment for 60 thousand, and reaching more than 40 million people on 5 continents. We invest in energy & climate, material and digital technologies, through an agile global footprint to design a sustainable future with a goal of achieving 'Net Zero' by 2050. We stride confidently towards the future through Sabancı of New Generation culture and our purpose driven, stakeholder oriented, agile and diverse organization. We are committed to ensuring equal rights and opportunities to foster a positive and an inclusive work environment and to contribute to the socio economic development of the community. With tens of thousands of talents, stakeholders and investments in multiple businesses worldwide, what connects us is our purpose: We unite Turkey and the World for a sustainable life with leading enterprises.

Loading…

NEWS

MFS Investment Management CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 25, 2025 01:01 PM

MFS Investment Management partners with Crayola to provide financial literacy resources to schools, families

MFS Investment Management and Crayola are joining forces to bring financial literacy resources to local schools with the goal of helping...

Read Article

October 21, 2025 07:00 AM

AI in investment management: 5 lessons from the risk frontier

ARTIFICIAL intelligence (AI) is transforming how investment decisions are made, and it is here to stay. Used wisely, the technology can...

Read Article

October 06, 2025 07:00 AM

Sun Life names president, unveils evolution of asset management pillar

Tom Murphy has been named president of Sun Life Asset Management as part of a strategic formalization of the asset management business of...

Read Article

October 02, 2025 07:00 AM

Product & Service Launches

Raymond James debuts 3 ETFs; Lincoln Financial and Partners Group launch cross-sector royalty evergreen fund; MFS expands active ETF lineup;...

Read Article

September 26, 2025 07:00 AM

Weak policy support, trust issues hinder digital banking growth

Speakers at a discussion on Thursday stressed that despite its vast potential, digital banking in Bangladesh had yet to flourish due to weak...

Read Article

June 16, 2025 07:00 AM

Fixed Income Strategies: Broadening the Menu

The current administration's tariff policy intentions and resulting market upheaval have upended long-established investment certainties.

Read Article

May 20, 2025 07:00 AM

Why MFS president is concerned about ‘long-term washing’

Carol Geremia, president of the Boston-headquartered MFS Investment Management, said “long-term washing” has become one of her biggest worries.

Read Article

February 12, 2025 12:37 AM

Sun Life Attracts Suitors in Effort to Unload MFS

MFS Investment Management, long rumored to be on the auction block due to lagging profit margins, middling performance and increasing regulatory demands,...

Read Article

January 31, 2025 08:00 AM

MFS, the managing director Jose Corena reflects on the firm's legacy and future

Jose Corena, managing director at MFS, reflects on the firm's 100-year journey, its evolution into a global leader, and its continued commitment to long-term,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55790

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50284

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50283

SUMMARY

Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14440

SUMMARY

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.6

Complexity: HIGH

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14422

SUMMARY

Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…