Company Details
museum-of-contemporary-art-santa-barbara
9
463
712
mcasantabarbara.org
0
MUS_1751446
In-progress

Museum of Contemporary Art Santa Barbara Company CyberSecurity Posture
mcasantabarbara.orgMuseum of Contemporary Art Santa Barbara (MCASB) seeks to enrich lives and inspire critical thinking through meaningful engagement with the art and ideas of our time. MCASB provides Santa Barbara and the Central Coast with exhibitions and programming that encourage discovery, cultivate new perspectives, and challenge the way we see and experience the world, ourselves, and each other.
Company Details
museum-of-contemporary-art-santa-barbara
9
463
712
mcasantabarbara.org
0
MUS_1751446
In-progress
Between 700 and 749

MCASB Global Score (TPRM)XXXX

Description: The California Office of the Attorney General reported a data breach involving the Museum of Contemporary Art Santa Barbara on August 4, 2020. The breach occurred on May 31, 2020, and involved a ransomware attack, resulting in a copy of a Blackbaud eTapestry backup being removed by cybercriminals. No credit card information, bank account information, or social security numbers were compromised.


No incidents recorded for Museum of Contemporary Art Santa Barbara in 2025.
No incidents recorded for Museum of Contemporary Art Santa Barbara in 2025.
No incidents recorded for Museum of Contemporary Art Santa Barbara in 2025.
MCASB cyber incidents detection timeline including parent company and subsidiaries

Museum of Contemporary Art Santa Barbara (MCASB) seeks to enrich lives and inspire critical thinking through meaningful engagement with the art and ideas of our time. MCASB provides Santa Barbara and the Central Coast with exhibitions and programming that encourage discovery, cultivate new perspectives, and challenge the way we see and experience the world, ourselves, and each other.


Located in the city of Columbia and the County of Boone in Missouri, we preserve the our County's past for the future. Objectives include, collecting, preserving and exhibiting historic artifacts and records of residents and organizations from Boone County. The Boone County Historical Society opera
ACMI is Australia's national museum of screen culture. Navigate the universe of film, TV, videogames and art with us. ACMI celebrates the wonder and power of the world’s most democratic artform – fostering the next generation of makers, players and watchers. ACMI’s vibrant calendar of exhibitions,

The Wexner Center for the Arts is The Ohio State University's multidisciplinary, international laboratory for the exploration and advancement of contemporary art. Through exhibitions, screenings, performances, artist residencies, and educational programs, the Wexner Center acts as a forum where e

The New Americans Museum was founded in 2001 by successful entrepreneur and philanthropist Deborah Szekely to address the need for a national and regional institution to embrace our country’s immigrant past, present and future. The Museum opened in its current location in 2008 and temporarily suspen

The Kimbell Art Museum, owned and operated by the Kimbell Art Foundation, is internationally renowned for both its collections and for its architecture. The Kimbell’s collections range in period from antiquity to the 20th century and include European masterpieces by artists such as Fra Angelico, Mic

This great little award-winning Museum is aimed at 6 to 12 year-olds and their families and is situated in Roald Dahl’s home village of Great Missenden in Buckinghamshire. The Museum has three fun and fact-packed interactive galleries. Boy Gallery focuses on Roald Dahl’s prank-filled school days.
.png)
In 2025, Santa Barbara's vibrant tech education landscape features top institutions like UCSB, with 200 academic programs and a 17:1 student-faculty ratio.
Jackson Muhirwe, UC Santa Barbara's chief information security officer and director of information assurance, is a seasoned higher education leader.
UCSB is to be the headquarters of a NSF-funded state-of-the-art AI-powered cybersecurity institute.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Museum of Contemporary Art Santa Barbara is https://mcasantabarbara.org.
According to Rankiteo, Museum of Contemporary Art Santa Barbara’s AI-generated cybersecurity score is 723, reflecting their Moderate security posture.
According to Rankiteo, Museum of Contemporary Art Santa Barbara currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Museum of Contemporary Art Santa Barbara is not certified under SOC 2 Type 1.
According to Rankiteo, Museum of Contemporary Art Santa Barbara does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Museum of Contemporary Art Santa Barbara is not listed as GDPR compliant.
According to Rankiteo, Museum of Contemporary Art Santa Barbara does not currently maintain PCI DSS compliance.
According to Rankiteo, Museum of Contemporary Art Santa Barbara is not compliant with HIPAA regulations.
According to Rankiteo,Museum of Contemporary Art Santa Barbara is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Museum of Contemporary Art Santa Barbara operates primarily in the Museums, Historical Sites, and Zoos industry.
Museum of Contemporary Art Santa Barbara employs approximately 9 people worldwide.
Museum of Contemporary Art Santa Barbara presently has no subsidiaries across any sectors.
Museum of Contemporary Art Santa Barbara’s official LinkedIn profile has approximately 463 followers.
Museum of Contemporary Art Santa Barbara is classified under the NAICS code 712, which corresponds to Museums, Historical Sites, and Similar Institutions.
No, Museum of Contemporary Art Santa Barbara does not have a profile on Crunchbase.
Yes, Museum of Contemporary Art Santa Barbara maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/museum-of-contemporary-art-santa-barbara.
As of December 03, 2025, Rankiteo reports that Museum of Contemporary Art Santa Barbara has experienced 1 cybersecurity incidents.
Museum of Contemporary Art Santa Barbara has an estimated 2,134 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.
Title: Data Breach at Museum of Contemporary Art Santa Barbara
Description: The California Office of the Attorney General reported a data breach involving the Museum of Contemporary Art Santa Barbara on August 4, 2020. The breach occurred on May 31, 2020, and involved a ransomware attack, resulting in a copy of a Blackbaud eTapestry backup being removed by cybercriminals. No credit card information, bank account information, or social security numbers were compromised.
Date Detected: 2020-05-31
Date Publicly Disclosed: 2020-08-04
Type: Data Breach
Attack Vector: Ransomware
Common Attack Types: The most common types of attacks the company has faced is Ransomware.

Data Compromised: Blackbaud eTapestry backup
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Blackbaud eTapestry backup.

Entity Name: Museum of Contemporary Art Santa Barbara
Entity Type: Non-profit
Industry: Arts and Culture
Location: Santa Barbara, California

Type of Data Compromised: Blackbaud eTapestry backup

Data Exfiltration: True

Source: California Office of the Attorney General
Date Accessed: 2020-08-04
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney GeneralDate Accessed: 2020-08-04.
Most Recent Incident Detected: The most recent incident detected was on 2020-05-31.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2020-08-04.
Most Significant Data Compromised: The most significant data compromised in an incident was Blackbaud eTapestry backup.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach was Blackbaud eTapestry backup.
Most Recent Source: The most recent source of information about an incident is California Office of the Attorney General.
.png)
vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.11.1, vllm has a critical remote code execution vector in a config class named Nemotron_Nano_VL_Config. When vllm loads a model config that contains an auto_map entry, the config class resolves that mapping with get_class_from_dynamic_module(...) and immediately instantiates the returned class. This fetches and executes Python from the remote repository referenced in the auto_map string. Crucially, this happens even when the caller explicitly sets trust_remote_code=False in vllm.transformers_utils.config.get_config. In practice, an attacker can publish a benign-looking frontend repo whose config.json points via auto_map to a separate malicious backend repo; loading the frontend will silently run the backend’s code on the victim host. This vulnerability is fixed in 0.11.1.
fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fastify/reply-from. This vulnerability is fixed in 12.5.0.
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.
Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder.
Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.