Company Details
mitchells-&-butlers
10,677
75,552
7211
mbplc.com
0
MIT_2438907
In-progress

Mitchells & Butlers PLC Company CyberSecurity Posture
mbplc.comEstablished in 1898, we're one of the largest operators of restaurants, pubs and bars in the UK, providing a wide choice of eating and drinking-out experiences through our well-known brands and delivering great service, quality and value for money to our guests.
Company Details
mitchells-&-butlers
10,677
75,552
7211
mbplc.com
0
MIT_2438907
In-progress
Between 750 and 799

MBP Global Score (TPRM)XXXX



No incidents recorded for Mitchells & Butlers PLC in 2025.
No incidents recorded for Mitchells & Butlers PLC in 2025.
No incidents recorded for Mitchells & Butlers PLC in 2025.
MBP cyber incidents detection timeline including parent company and subsidiaries

Established in 1898, we're one of the largest operators of restaurants, pubs and bars in the UK, providing a wide choice of eating and drinking-out experiences through our well-known brands and delivering great service, quality and value for money to our guests.


No loud pretense. No excess formalities. Just understated elegance you’ll feel the moment you walk into one of over 80 worldwide destinations. JW Marriott is part of Marriott International’s luxury portfolio and consists of beautiful properties in gateway cities and distinctive resort locations in

Welcome to Meliá Hotels International! From Mallorca to the world, our story is an exciting journey that began more than six decades ago and has led us to become one of the largest hotel chains on the planet and the most sustainable in Europe (S&P Global). With more than 400 hotels across the worl

Our Vision : Asia’s premier purveyor of designer affordable luxury hotels & design oriented value hotels focusing in the business travel market with particular strength in Indonesia and implementing asset-light strategy. Our Mission : Never to settle for anything less than excellence and will

Established in 1975, ITC Hotels Limited has grown to encompass over 140+ hotels across 90+ destinations, solidifying its presence in the Indian subcontinent ITC Hotels seamlessly blends India’s rich tradition of hospitality with globally benchmarked services, offering a collection of hotels and res

Located in the heart of each destination we call home, a stay at any Fairmont hotel is truly unforgettable. Known for grand and awe-inspiring properties and thoughtful and engaging colleagues who aim to make each and every stay a cherished and memorable experience, we have been the stage for some of

The resorts and casinos of MGM Resorts International™ are some of the most famous in the world. Our 28 destinations are renowned for their winning combination of quality entertainment, luxurious facilities, and exceptional customer service. We are actively expanding our presence globally, with pot

Kerzner International has built a diverse collection of iconic brands and luxury properties, earning international acclaim for pioneering destination-defining hospitality, delivering unrivalled service, and curating transformative guest experiences. We are renowned for creating hospitality brands
We are Accor We are more than 290,000 hospitality experts placing people at the heart of what we do, creating emotion for our guests, and nurturing passion for service and achievement beyond limits. Building on the strength of our teams and of our fully integrated ecosystem of leading brands, perso

IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. With a family of 19 hotel brands and IHG One Rewards, one of the world's largest hotel loyalty programmes, IHG has over 6,300 open hotels in more than 100 countries,
.png)
Authorities are investigating a shocking incident in Mitchells Plain where a child was filmed consuming alcohol. Image: Supplied.
Donovan Mitchell is close to making history with the Cleveland Cavaliers. So far in the team's franchise history, LeBron James is the only player to average...
The Jason Mitchell Group surpassed 1300 agents. It attributed this growth to the firm's business-to-business referral opportunities.
As Garrett Wilson recovers, the Jets may have found the future of the receiver position in two unlikely players.
Rutherford County Property Assessor Rob Mitchell faces another state deadline by Nov. 26 to correct records or face the Tennessee Attorney...
In 2018, the New York Knicks drafted a promising center out of Western Kentucky with the 36th overall pick. He profiled as a fantastic...
Arlene Bailey MitchellDied: November 25, 2025Arlene Bailey Mitchell, age 94, of Limestone, passed away Tuesday, November 25, 2025,...
SHREVEPORT, La. (KTAL/KMSS) – Actor, producer, and TV host Kel Mitchell has a lot going on, but he's not too busy to share information about...
The St. Tammany Parish Coroner has identified a woman who died from carbon monoxide poisoning earlier this week in Slidell.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Mitchells & Butlers PLC is http://www.mbplc.com.
According to Rankiteo, Mitchells & Butlers PLC’s AI-generated cybersecurity score is 780, reflecting their Fair security posture.
According to Rankiteo, Mitchells & Butlers PLC currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Mitchells & Butlers PLC is not certified under SOC 2 Type 1.
According to Rankiteo, Mitchells & Butlers PLC does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Mitchells & Butlers PLC is not listed as GDPR compliant.
According to Rankiteo, Mitchells & Butlers PLC does not currently maintain PCI DSS compliance.
According to Rankiteo, Mitchells & Butlers PLC is not compliant with HIPAA regulations.
According to Rankiteo,Mitchells & Butlers PLC is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Mitchells & Butlers PLC operates primarily in the Hospitality industry.
Mitchells & Butlers PLC employs approximately 10,677 people worldwide.
Mitchells & Butlers PLC presently has no subsidiaries across any sectors.
Mitchells & Butlers PLC’s official LinkedIn profile has approximately 75,552 followers.
Mitchells & Butlers PLC is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.
No, Mitchells & Butlers PLC does not have a profile on Crunchbase.
Yes, Mitchells & Butlers PLC maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mitchells-&-butlers.
As of November 27, 2025, Rankiteo reports that Mitchells & Butlers PLC has not experienced any cybersecurity incidents.
Mitchells & Butlers PLC has an estimated 13,643 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Mitchells & Butlers PLC has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.