What is the official website of North Atlantic States Carpenters Benefit Funds ?

The official website of North Atlantic States Carpenters Benefit Funds is https://www.carpentersfund.org/.

What is North Atlantic States Carpenters Benefit Funds's cybersecurity risk score?

North Atlantic States Carpenters Benefit Funds has an AI-generated cybersecurity risk score of 692 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has North Atlantic States Carpenters Benefit Funds experienced?

According to Rankiteo, North Atlantic States Carpenters Benefit Funds currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has North Atlantic States Carpenters Benefit Funds been affected by any supply chain cyber incidents ?

According to Rankiteo, North Atlantic States Carpenters Benefit Funds has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does North Atlantic States Carpenters Benefit Funds have SOC 2 Type 1 certification ?

According to Rankiteo, North Atlantic States Carpenters Benefit Funds is not certified under SOC 2 Type 1.

Does North Atlantic States Carpenters Benefit Funds have SOC 2 Type 2 certification ?

According to Rankiteo, North Atlantic States Carpenters Benefit Funds does not hold a SOC 2 Type 2 certification.

Does North Atlantic States Carpenters Benefit Funds comply with GDPR ?

According to Rankiteo, North Atlantic States Carpenters Benefit Funds is not listed as GDPR compliant.

Does North Atlantic States Carpenters Benefit Funds have PCI DSS certification ?

According to Rankiteo, North Atlantic States Carpenters Benefit Funds does not currently maintain PCI DSS compliance.

Does North Atlantic States Carpenters Benefit Funds comply with HIPAA ?

According to Rankiteo, North Atlantic States Carpenters Benefit Funds is not compliant with HIPAA regulations.

Does North Atlantic States Carpenters Benefit Funds have ISO 27001 certification ?

According to Rankiteo,North Atlantic States Carpenters Benefit Funds is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does North Atlantic States Carpenters Benefit Funds operate in ?

North Atlantic States Carpenters Benefit Funds operates primarily in the Insurance and Employee Benefit Funds industry.

How many employees does North Atlantic States Carpenters Benefit Funds have ?

North Atlantic States Carpenters Benefit Funds employs approximately 11 people worldwide.

Does North Atlantic States Carpenters Benefit Funds own any subsidiaries ?

North Atlantic States Carpenters Benefit Funds presently has no subsidiaries across any sectors.

How many LinkedIn followers does North Atlantic States Carpenters Benefit Funds have ?

North Atlantic States Carpenters Benefit Funds's official LinkedIn profile has approximately 106 followers.

What is the NAICS classification code for North Atlantic States Carpenters Benefit Funds ?

North Atlantic States Carpenters Benefit Funds is classified under the NAICS code 5251, which corresponds to Insurance and Employee Benefit Funds.

Does North Atlantic States Carpenters Benefit Funds have a Crunchbase profile ?

No, North Atlantic States Carpenters Benefit Funds does not have a profile on Crunchbase.

Does North Atlantic States Carpenters Benefit Funds have a LinkedIn profile ?

Yes, North Atlantic States Carpenters Benefit Funds maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/north-atlantic-states-carpenters-benefit-funds.

How many cybersecurity incidents has North Atlantic States Carpenters Benefit Funds experienced ?

As of July 13, 2026, Rankiteo reports that North Atlantic States Carpenters Benefit Funds has experienced 1 cybersecurity incidents.

How many peer or competitor companies does North Atlantic States Carpenters Benefit Funds have ?

North Atlantic States Carpenters Benefit Funds has an estimated 56 peer or competitor companies worldwide.

What types of cybersecurity incidents has North Atlantic States Carpenters Benefit Funds faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

NASCBF

Boost Score +25 with badge (5 left)

692

/1000

Weak

717

/1000

Moderate

North Atlantic States Carpenters Benefit Funds Vendor Cyber Rating & Cyber Score

carpentersfund.org

Add Your Compliance Badge

The North Atlantic States Carpenters Benefit Funds (NASCBF) is a large Multi-Employer ERISA regulated Benefit Fund that provides comprehensive retirement, health & welfare, and other benefits to more than 45,000 active and retired participants and families of the United Brotherhood of Carpenters across all the New England states and New York State (excluding New York City). The NASCBF is managed by a combined Board of twenty-six labor and management Trustees which meets regularly as a Board and through various sub-committees. Benefits are administered by Fund Offices with locations in Massachusetts, Connecticut, and New York State. We all look forward to working with you during your careers to ensure that you receive Great Benefits for

NASCBF A.I CyberSecurity Scoring

Scoring History

NASCBF

North Atlantic States Carpenters Benefit Funds CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

North Atlantic Stat...

Breach

100

12/2025

NOR1765397234

Loading…

A.I.

NASCBF Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for NASCBF

Incidents vs Insurance and Employee Benefit Funds Industry Avg (This Year)

No incidents recorded for North Atlantic States Carpenters Benefit Funds in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for North Atlantic States Carpenters Benefit Funds in 2026.

Incident Types NASCBF vs Insurance and Employee Benefit Funds Industry Avg (This Year)

No incidents recorded for North Atlantic States Carpenters Benefit Funds in 2026.

Incident History - NASCBF (X = Date, Y = Severity)

Loading…

SUBSIDIARY

North Atlantic States Carpenters Benefit Funds Subsidiaries

Parent Company

NASCBF

Insurance and Employee Benefit Funds

Website: https://www.carpentersfund.org/

Company Size: 11

No subsidiary data available for this company.

Loading…

North Atlantic States Carpenters Benefit Funds Similar Companies

Loading…

NEWS

North Atlantic States Carpenters Benefit Funds CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 13, 2026 08:00 AM

North Atlantic States Carpenters Benefit Funds Data Breach Claims Investigated by Lynch Carpenter

PITTSBURGH, Feb. 13, 2026 (GLOBE NEWSWIRE) -- North Atlantic States Carpenters Benefit Funds (“NASCBF”),1 recently announced a cybersecurity...

Read Article

December 11, 2025 08:00 AM

North Atlantic States Carpenters Health Benefits Fund Data Breach Investigation

Strauss Borrelli PLLC, a leading data breach law firm, is investigating North Atlantic States Carpenters Health Benefits Fund (“NASCBF”)...

Read Article

December 10, 2025 08:00 AM

Data Breaches Announced by North Atlantic States Carpenters Health Benefits Fund & Millcreek Pediatrics

Data breaches have recently been announced by the North Atlantic States Carpenters Health Benefits Fund in Massachusetts and Millcreek...

Read Article

September 26, 2025 07:00 AM

Motility Software Solutions Data Breach Impacts 760K

If you received a notice that your information was compromised, you may be able to start a class action to collect money for the harm you've...

Read Article

July 14, 2025 09:37 PM

Southern Connecticut Vascular Center Data Breach Lawsuit Investigation

Got a notice about the data breach? Learn how filing a class action could help you recover money for exposure of your data.

Read Article

July 14, 2025 07:00 AM

Dordt University Data Breach Lawsuit Investigation

If you received a notice that your information was compromised, you may be able to start a class action to collect money for the harm you've...

Read Article

June 27, 2025 07:00 AM

Ahold Delhaize USA Services Data Breach Lawsuit Investigation

Did you get a notice about the data breach? You may be able to start a class action lawsuit and recover money for exposure of your info.

Read Article

April 24, 2025 07:00 AM

Alternate Solutions Health Network Data Breach Lawsuit Investigation

If you received a notice that your information was compromised, you may be able to start a class action to collect money for the harm you've...

Read Article

April 11, 2025 07:00 AM

AACOM Data Breach Lawsuit Investigation

Got an AACOM data breach notice? Learn about your legal options. You may be able to recover money for exposure of your data.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-15511

SUMMARY

A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function system_wl_upload_pic_file of the file /usr/bin/webmgnt of the component FastCGI Backend. This manipulation of the argument filename causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-07-12

Updated

Date2026-07-12

RISK INFORMATION (Score: 9.8)

cvss2

Base Score: 10.0

Complexity: LOW

AV:N/AC:L/Au:N/C:C/I:C/A:C

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-15510

SUMMARY

A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-07-12

Updated

Date2026-07-12

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15509

SUMMARY

A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON-RPC Endpoint. The manipulation of the argument role leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-07-12

Updated

Date2026-07-12

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15508

SUMMARY

A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extracted_path_and_query can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-07-12

Updated

Date2026-07-12

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15507

SUMMARY

A vulnerability was detected in coollabsio Coolify up to 4.1.1. The impacted element is an unknown function of the file /app/Policies/ of the component Policy Handler. Performing a manipulation results in missing authorization. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-07-12

Updated

Date2026-07-12

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…