Moncler
Company Details
Linkedin ID:
moncler
Website:
Employees number:
3,548
Number of followers:
439,962
NAICS:
4483
Industry Type:
Homepage:
monclergroup.com
IP Addresses:
2
Company ID:
MON_2849693
Scan Status:
Completed
Moncler Company CyberSecurity Posture
monclergroup.com
Moncler was founded in Grenoble, France, in 1952 and is currently headquartered in Milan, Italy. Over the years the brand has combined style with constant technological research assisted by experts in activities linked to the world of the mountain. This makes the Moncler collections the quintessence of outwear that marries the extreme demands of nature with those of city life. In 2003 Remo Ruffini took over the company, of which he is currently President and Creative Director. Moncler manufactures and directly distributes men's, women's and accessory collections through its boutiques and in exclusive international department stores and multi-brand outlets.
Moncler A.I CyberSecurity Scoring
Moncler Risk Score (AI oriented)Between 750 and 799
Moncler
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
Moncler Global Score (TPRM)XXXX
Moncler
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
Moncler Company CyberSecurity News & History
Past Incidents
1
Attack Types
1
Moncler
Breach
Rankiteo Explanation
Attack threatening the organization's existence
Description: Italian luxury fashion brand Moncler suffered a data breach incident after it was targeted in a ransomware attack. The attackers released the stolen data of the company after it denied paying the ransom. The exposed data in the breach includes the personal information of current employees, former employees, suppliers, consultants, business partners, and customers.
Moncler Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for Moncler
Incidents vs Retail Luxury Goods and Jewelry Industry Average (This Year)
No incidents recorded for Moncler in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for Moncler in 2025.
Incident Types Moncler vs Retail Luxury Goods and Jewelry Industry Avg (This Year)
No incidents recorded for Moncler in 2025.
Incident History — Moncler (X = Date, Y = Severity)
Moncler cyber incidents detection timeline including parent company and subsidiaries
Moncler Company Subsidiaries
Moncler was founded in Grenoble, France, in 1952 and is currently headquartered in Milan, Italy. Over the years the brand has combined style with constant technological research assisted by experts in activities linked to the world of the mountain. This makes the Moncler collections the quintessence of outwear that marries the extreme demands of nature with those of city life. In 2003 Remo Ruffini took over the company, of which he is currently President and Creative Director. Moncler manufactures and directly distributes men's, women's and accessory collections through its boutiques and in exclusive international department stores and multi-brand outlets.
Loading...
Moncler Similar Companies
Gucci
Founded in Florence, Italy in 1921, Gucci is one of the world’s leading luxury brands. Following the House’s centenary, Gucci forges ahead continuing to redefine fashion and luxury while celebrating creativity, Italian craftsmanship, and innovation. Gucci is part of the global luxury group Kering,
Kering is a global, family-led luxury group, home to people whose passion and expertise nurture creative Houses across ready-to-wear and couture, leather goods, jewelry, eyewear and beauty: Gucci, Saint Laurent, Bottega Veneta, Balenciaga, McQueen, Brioni, Boucheron, Pomellato, Dodo, Qeelin, Ginori
Swatch Group
Swatch Group is the world's number one manufacturer of finished watches. With its 16 watch brands, the Group is present in all price segments, and is also active in the manufacture and sale of jewelry, watch movements and components. Swatch Group unites, among other companies, the following watch b
Chanel is a private company and world leader in creating, manufacturing and distributing luxury products, including Ready-to-Wear, Accessories, Fragrances, Makeup, Skincare, Jewellery and Watches. Founded by Gabrielle Chanel in 1910, the House remains dedicated to exceptional craftsmanship and offer
Swatch Group
The Swatch Group Ltd is an international group active in the manufacture and sale of finished watches, jewelry, watch movements and components. Swatch Group supplies nearly all components required for the watches sold by its 16 watch and jewelry brands as well as by its two retail brands, Tourbillon
At Richemont, we craft the future. Our unique portfolio includes prestigious Maisons distinguished by their craftsmanship and creativity. Richemont’s ambition is to nurture its Maisons and businesses and enable them to grow and prosper in a responsible, sustainable manner over the long term. Riche
Prada Group
The Prada Group is a global leader in the luxury industry and a pioneer in its unconventional dialogue with contemporary society across diverse cultural spheres. Home to prestigious brands as Prada, Miu Miu, Church’s, Car Shoe, Marchesi 1824 and Luna Rossa, the Group remains committed to enhancing
Pandora is the world’s largest jewellery brand. The company designs, manufactures and markets hand-finished jewellery made from high-quality materials at affordable prices Pandora jewellery is sold in more than 100 countries through more than 6,500 points of sale, including more than 2,500 concept s
Hermès
A creator, artisan and seller of high-quality objects since 1837, Hermès is an independent, family-owned French house that employs more than 16,600 people worldwide. Driven by its permanent entrepreneurial spirit and consistently high standards, Hermès cultivates the freedom and autonomy of each ind
.png)
Moncler CyberSecurity News
October 27, 2025 07:00 AM
Former L3Harris cyber executive accused of stealing trade secrets and trying to sell them to a Russian buyer
Peter Williams, a former general manager of US government defense contractor L3Harris's cyber division Trenchant, is being sued for theft of...
September 18, 2025 07:00 AM
APAC: key data protection updates (4 – 17 Sep)
Singapore warns major supply chain attack, China reviews draft to amend cybersecurity law, and South Korea's PIPC fines Moncler for data...
September 17, 2025 07:00 AM
Fashion’s Cybersecurity Target: A Year of Breaches at Adidas, Kering, and LVMH
Fashion industry cyberattacks have surged over the past year, with projected costs for major conglomerates hitting $10.5 trillion…
July 14, 2022 03:17 AM
Ransomware news trending on Google
1. A Financial service offering company to healthcare industry has admitted that a ransomware attack on its data firm could have led to a data breach...
January 20, 2022 08:00 AM
Moncler confirms data breach
Moncler, an Italian luxury brand, confirmed that they suffered a data breach. Files were stolen by the AlphV/BlackCat ransomware operation...
January 19, 2022 08:00 AM
Moncler Confirms Data Breach After Ransomware Gang Advertises ‘Rich Customer’ Data on Leak Website
Milano-based luxury fashion brand Moncler has confirmed a data breach after a ransomware attack that disrupted its IT service during Christmas.
January 19, 2022 08:00 AM
Moncler apologies to customers following cyber attacks
Moncler apologies to customers following cyber attacks ... Italian luxury fashion brand Moncler has apologised to its customers following a cyber...
January 19, 2022 08:00 AM
Ransomware Attack on Moncler
Cyber-criminals have stolen data from Italian luxury fashion brand Moncler and published it on the dark web.
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
Moncler CyberSecurity History Information
Official Website of Moncler
The official website of Moncler is http://www.monclergroup.com.
Moncler’s AI-Generated Cybersecurity Score
According to Rankiteo, Moncler’s AI-generated cybersecurity score is 774, reflecting their Fair security posture.
How many security badges does Moncler’ have ?
According to Rankiteo, Moncler currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does Moncler have SOC 2 Type 1 certification ?
According to Rankiteo, Moncler is not certified under SOC 2 Type 1.
Does Moncler have SOC 2 Type 2 certification ?
According to Rankiteo, Moncler does not hold a SOC 2 Type 2 certification.
Does Moncler comply with GDPR ?
According to Rankiteo, Moncler is not listed as GDPR compliant.
Does Moncler have PCI DSS certification ?
According to Rankiteo, Moncler does not currently maintain PCI DSS compliance.
Does Moncler comply with HIPAA ?
According to Rankiteo, Moncler is not compliant with HIPAA regulations.
Does Moncler have ISO 27001 certification ?
According to Rankiteo,Moncler is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of Moncler
Moncler operates primarily in the Retail Luxury Goods and Jewelry industry.
Number of Employees at Moncler
Moncler employs approximately 3,548 people worldwide.
Subsidiaries Owned by Moncler
Moncler presently has no subsidiaries across any sectors.
Moncler’s LinkedIn Followers
Moncler’s official LinkedIn profile has approximately 439,962 followers.
NAICS Classification of Moncler
Moncler is classified under the NAICS code 4483, which corresponds to Jewelry, Luggage, and Leather Goods Stores.
Moncler’s Presence on Crunchbase
Yes, Moncler has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/moncler-s-p-a.
Moncler’s Presence on LinkedIn
Yes, Moncler maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/moncler.
Cybersecurity Incidents Involving Moncler
As of November 27, 2025, Rankiteo reports that Moncler has experienced 1 cybersecurity incidents.
Number of Peer and Competitor Companies
Moncler has an estimated 1,363 peer or competitor companies worldwide.
What types of cybersecurity incidents have occurred at Moncler ?
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Incident Details
Can you provide details on each incident ?
Title: Moncler Ransomware Attack and Data Breach
Description: Italian luxury fashion brand Moncler suffered a data breach incident after it was targeted in a ransomware attack. The attackers released the stolen data of the company after it denied paying the ransom. The exposed data in the breach includes the personal information of current employees, former employees, suppliers, consultants, business partners, and customers.
Type: Ransomware and Data Breach
Motivation: Financial gain
What are the most common types of attacks the company has faced ?
Common Attack Types: The most common types of attacks the company has faced is Breach.
Impact of the Incidents
What was the impact of each incident ?
Incident : Ransomware and Data Breach MON14572422
Data Compromised: Personal information of current employees, Personal information of former employees, Personal information of suppliers, Personal information of consultants, Personal information of business partners, Personal information of customers
What types of data are most commonly compromised in incidents ?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personal Information and .
Which entities were affected by each incident ?
Incident : Ransomware and Data Breach MON14572422
Entity Name: Moncler
Entity Type: Company
Industry: Luxury Fashion
Location: Italy
Data Breach Information
What type of data was compromised in each breach ?
Incident : Ransomware and Data Breach MON14572422
Type of Data Compromised: Personal information
Ransomware Information
Was ransomware involved in any of the incidents ?
Additional Questions
General Information
What was the amount of the last ransom demanded ?
Last Ransom Demanded: The amount of the last ransom demanded was True.
Impact of the Incidents
What was the most significant data compromised in an incident ?
Most Significant Data Compromised: The most significant data compromised in an incident were Personal information of current employees, Personal information of former employees, Personal information of suppliers, Personal information of consultants, Personal information of business partners, Personal information of customers and .
Data Breach Information
What was the most sensitive data compromised in a breach ?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Personal information of business partners, Personal information of consultants, Personal information of current employees, Personal information of suppliers, Personal information of customers and Personal information of former employees.
Ransomware Information
What was the highest ransom demanded in a ransomware incident ?
Highest Ransom Demanded: The highest ransom demanded in a ransomware incident was True.
.png)
Latest Global CVEs (Not Company-Specific)
Description
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
- https://github.com/angular/angular/commit/0276479e7d0e280e0f8d26fa567d3b7aa97a516f
- https://github.com/angular/angular/commit/05fe6686a97fa0bcd3cf157805b3612033f975bc
- https://github.com/angular/angular/commit/3240d856d942727372a705252f7c8c115394a41e
- https://github.com/angular/angular/releases/tag/19.2.16
- https://github.com/angular/angular/releases/tag/20.3.14
- https://github.com/angular/angular/releases/tag/21.0.1
- https://github.com/angular/angular/security/advisories/GHSA-58c5-g7wp-6w37
Description
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=moncler' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
