What is the official website of Osaic ?

The official website of Osaic is http://Osaic.com.

What is Osaic's cybersecurity risk score?

Osaic has an AI-generated cybersecurity risk score of 740 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Osaic experienced?

According to Rankiteo, Osaic currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Osaic been affected by any supply chain cyber incidents ?

According to Rankiteo, Osaic has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Osaic have SOC 2 Type 1 certification ?

According to Rankiteo, Osaic is not certified under SOC 2 Type 1.

Does Osaic have SOC 2 Type 2 certification ?

According to Rankiteo, Osaic does not hold a SOC 2 Type 2 certification.

Does Osaic comply with GDPR ?

According to Rankiteo, Osaic is not listed as GDPR compliant.

Does Osaic have PCI DSS certification ?

According to Rankiteo, Osaic does not currently maintain PCI DSS compliance.

Does Osaic comply with HIPAA ?

According to Rankiteo, Osaic is not compliant with HIPAA regulations.

Does Osaic have ISO 27001 certification ?

According to Rankiteo,Osaic is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Osaic operate in ?

Osaic operates primarily in the Financial Services industry.

How many employees does Osaic have ?

Osaic employs approximately 2,470 people worldwide.

Does Osaic own any subsidiaries ?

Osaic presently has no subsidiaries across any sectors.

How many LinkedIn followers does Osaic have ?

Osaic's official LinkedIn profile has approximately 73,943 followers.

What is the NAICS classification code for Osaic ?

Osaic is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does Osaic have a Crunchbase profile ?

No, Osaic does not have a profile on Crunchbase.

Does Osaic have a LinkedIn profile ?

Yes, Osaic maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/osaicinc.

How many cybersecurity incidents has Osaic experienced ?

As of July 2, 2026, Rankiteo reports that Osaic has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Osaic have ?

Osaic has an estimated 32,210 peer or competitor companies worldwide.

What types of cybersecurity incidents has Osaic faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Osaic

Boost Score +25 with badge (5 left)

740

/1000

Moderate

765

/1000

Fair

Osaic Vendor Cyber Rating & Cyber Score

Osaic.com

Add Your Compliance Badge

Osaic provides the support, resources, and community designed for the future of wealth management. Securities and investment advisory services are offered through the firms: Osaic Wealth, Inc. and Osaic Institutions, Inc., broker-dealers, registered investment advisers, and members of FINRA and SIPC. Securities are offered through Osaic Services, Inc. and Ladenburg Thalmann & Co., broker-dealers and members of FINRA and SIPC. Advisory services are offered through Ladenburg Thalmann Asset Management, Inc., Osaic Advisory Services, LLC. and CW Advisors, LLC., registered investment advisers. Advisory programs offered by Osaic Wealth, Inc. are sponsored by VISION2020 Wealth Management Corp., an affiliated registered investment adviser.

Osaic A.I CyberSecurity Scoring

Scoring History

Osaic

Osaic CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Osaic

Breach

12/2021

OSA1014090725

Loading…

A.I.

Osaic Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Osaic

Incidents vs Financial Services Industry Avg (This Year)

No incidents recorded for Osaic in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Osaic in 2026.

Incident Types Osaic vs Financial Services Industry Avg (This Year)

No incidents recorded for Osaic in 2026.

Incident History - Osaic (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Osaic Subsidiaries

Parent Company

Osaic

Financial Services

Website: http://Osaic.com

Company Size: 1,001-5,000 employees

No subsidiary data available for this company.

Loading…

Osaic Similar Companies

MUFG

mufg.jp

MUFG (Mitsubishi UFJ Financial Group) is one of the world's leading financial groups. Headquartered in Tokyo and with over 360 years of history, MUFG has a global network with over 2,100 locations in more than 40 markets including the Americas, Europe, the Middle East and Africa, Asia and Oceania. The Group has over 120,000 employees and offers services including commercial banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing. Through close partnerships among our group companies, the Group aims to be the world's most trusted financial group, flexibly responding to all of the financial needs of its customers, serving society, and fostering shared and sustainable growth for a better world. MUFG's shares trade on the Tokyo, Nagoya, and New York stock exchanges. Watch our profile video: https://youtu.be/htyOjA1H6bQ Details of MUFG's Group companies can be found at the following websites: http://www.bk.mufg.jp/global http://www.tr.mufg.jp/english https://mufgamericas.com https://www.mufgemea.com http://www.hd.sc.mufg.jp/english ©2024Mitsubishi UFJ Financial Group, Inc. All rights reserved. The MUFG logo and name is a service mark of Mitsubishi UFJ Financial Group, Inc.

Dubai Holding

dubaiholding.com

Dubai Holding is a diversified global investment company that continues to power Dubai’s growth across 10 key sectors, including real estate, hospitality, leisure & entertainment, media, ICT, design, education, retail, manufacturing & logistics and science. Since 2004, we have made strides with an effective strategy aimed at supporting an innovation-driven, knowledge-based economy. This is in line with Dubai’s long-term ambition of becoming a leading global hub for business and tourism. Follow our journey as we invest in making a lasting impact on Dubai, its people and our economy #ForTheGoodofTomorrow .

Fifth Third Bank

53.com

At Fifth Third Bank, everything we do is rooted in our purpose: to improve the lives of our customers and the well-being of our communities. Since our founding in 1858, we’ve been committed to creating a better financial experience by empowering our customers and clients to achieve what matters most. Our unified strength is grounded in the individual passion and diversity of more than 20,000 employees who work collaboratively to deliver a better tomorrow to everyone we serve. We offer a strong culture, opportunities for growth 401k match, wellness options, comprehensive insurance plans and additional resources you need to build a lasting and rewarding career path here. Headquartered in Cincinnati, Ohio, we are among the largest money managers in the Midwest. We operate four main businesses—Commercial Banking, Branch Banking, Consumer Lending, and Wealth & Asset Management—and a network of financial centers in Ohio, Kentucky, Indiana, Michigan, Illinois, Florida, Tennessee, West Virginia, Georgia, North Carolina and South Carolina. Consumers also have access to approximately 54,000 Fifth Third fee-free ATMs across the United States. Fifth Third Bancorp is a diversified financial services company and is the indirect parent company of Fifth Third Bank, National Association, a federally chartered institution. Explore Fifth Third career opportunities at: https://www.53.com/content/fifth-third/en/careers.html Fifth Third Bank, N.A., Member FDIC. Fifth Third Bank is proud to be an affirmative action/equal opportunity employer. M/F/D/V

IIFL (India Infoline Group)

indiainfoline.com

IIFL group is one of India's largest diversified financial services conglomerates with three listed entities - IIFL Finance, IIFL Securities and 360 ONE Wealth & Asset Management. Founded in 1995 by Nirmal Jain as a small research house, today IIFL Group employs over 40000 people and caters to over 10 million customers through various financial products and services. Our strength has been to continuously innovate and reinvent ourselves. IIFL’s evolution from an entrepreneurial start-up in 1995 to a full range diversified financial services group is a story of steady growth by adapting to the dynamic business environment, without losing focus on our core domain of financial services. Today IIFL Group manages assets over $50 billion and is present across Asia, Europe and the US. IIFL Group's companies are backed by marquee investors like Fairfax, Bain Capital, The Capital Group and WardFerry among others.

CIMB

cimb.com

CIMB Group is a leading ASEAN universal bank, one of the largest Asian investment banks and one of the world's largest Islamic banks. We are headquartered in Kuala Lumpur, Malaysia and offer consumer banking, commercial banking, wholesale banking, Islamic banking, and asset management products and services. As the fifth largest banking group in ASEAN, we have over 36,000 staff in 16 locations across ASEAN, Asia and beyond. CIMB Bank and CIMB Islamic Bank are members of PIDM.

XP Inc.

xpinc.com

A XP Inc. é uma das maiores instituições financeiras independente do Brasil, dona das marcas XP, Rico, Clear, XP Educação, InfoMoney, entre outras. Com mais de 4,6 milhões de clientes ativos e um valor superior a R$ 1,3 trilhão de ativos sob custódia, há 24 anos vem transformando o mercado financeiro para melhorar a vida das pessoas. Foi pioneira no mercado com sua rede de assessores de investimentos, que hoje é a maior do país, com mais de 18,3 mil profissionais. Com uma cultura marcante guiada por quatro valores - Sonho Grande, Espírito Empreendedor, Foco no Cliente e Mente Aberta - a XP Inc. está sempre em busca dos melhores talentos que tem ambição de fazer o impossível.

TIAA

tiaa.org

At TIAA, we believe everyone has the right to retire with dignity. For more than 100 years, we’ve provided retirement plans, insurance, and investment services, empowering millions of people— in education, healthcare, and nonprofit —with the knowledge, guidance, and lifetime income needed to plan their futures. We are fighting to ensure a more secure financial future for all and for generations to come. Visit tiaa.org to learn more about preparing for a more secure retirement. For our Terms of Use, please visit ter.li/termsofuse. 4127037

Old Mutual South Africa

oldmutual.co.za

Old Mutual Limited is a premium pan-African financial services group that offers a broad spectrum of financial solutions to retail and corporate customers across key markets in 14 countries. We have been helping our customers achieve their lifetime financial goals for over 170 years by investing their funds in ways that create positive futures for them, their families, their communities and broader society. In this way, we significantly contribute to improving the lives of our customers and their communities while ensuring a sustainable future for our business. We employ more than 30 000 people and operate in 14 countries across two regions Africa (South Africa, Namibia, Botswana, Zimbabwe, Kenya, Malawi, Tanzania, Nigeria, Ghana, Uganda, Rwanda, South Sudan and eSwatini) as well as Asia (China) So why work here? We believe you can shape the future with us – a future where we build a better Africa together. That’s why we’re committed to creating opportunities that will give you an edge on the rest. Once you’re part of our team, you will have access to the best breed of advice, tools and frameworks that will equip you to be your exceptional best. #MomentsThatMatter

Capital One

cb capitalone.com

At Capital One, we're making things better for our customers and associates through innovation and collaboration. We were founded on the belief that everyone deserves financial freedom—and are dedicated to a world where all have equal opportunity to prosper. Banking is in our DNA, but we are so much more than a bank. We always think about what’s next—and how we can bring our customers the tools needed to improve their financial lives. Your ideas, experiences and skills will help make banking better. You’ll be part of a supportive culture while earning amazing benefits. That’s life at Capital One. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. View our Social Media Community Guidelines https://www.capitalone.com/digital/social-media/

Loading…

NEWS

Osaic CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 18, 2025 07:00 AM

Osaic CEO Jamie Price: Speed of tech integration will disrupt wealth management industry

"The fourth Industrial Revolution, driven by artificial intelligence, cloud computing, and digital platforms," is what will transform wealth...

Read Article

February 12, 2025 11:35 AM

FINRA Fines Osaic B/Ds For Poor Cyber Defenses

The Financial Industry Regulatory Authority fined two Osaic broker/dealers $150,000 each for lacking cybersecurity safeguards that might have prevented...

Read Article

January 08, 2025 08:00 AM

Digital Digest: The Latest Tech News – Osaic, Iowa State Bank

US wealth management solutions provider Osaic is boosting its institutional channel by a new partnershiup with Iowa State Bank.

Read Article

October 31, 2024 07:00 AM

Markets/Coverages: Howden Launches Cyber Solution With Chubb, LSM and Mosaic

Howden, the London-based insurance intermediary group, announced the launch of Howden Safe+, a cyber insurance solution aimed at clients...

Read Article

May 02, 2024 05:33 PM

MOSAICS: Cyber Defense for Industrial Control Systems

the first-ever comprehensive, integrated, and automated solution for ICS cybersecurity. Known as MOSAICS—from “More Situational Awareness for Industrial Control...

Read Article

March 19, 2024 07:00 AM

FINRA Fines Osaic Wealth, Securities America Over Cyber Breaches

The Financial Industry Regulatory authority is requiring Osaic Wealth and Securities America to each pay a $150000 fine over cyber breaches...

Read Article

March 18, 2024 07:00 AM

Clayton Chandler Assumes Role of Chief Data and Analytics Officer at Osaic

Osaic, a leading provider of cybersecurity solutions, has appointed Clayton Chandler as its Chief Data and Analytics Officer.

Read Article

March 15, 2024 07:00 AM

Finra Fines, Censures Osaic and Securities America Over Cybersecurity Lapses

The Financial Industry Regulatory Authority has fined and censured independent broker-dealers Osaic Wealth and Securities America for cybersecurity lapses.

Read Article

March 15, 2024 07:00 AM

Osaic, Securities America fined by Finra over cybersecurity

The regulator fined the firms $150000 each for failures related to protecting thousands of clients' private information and cybersecurity...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55790

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50284

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50283

SUMMARY

Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14440

SUMMARY

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.6

Complexity: HIGH

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14422

SUMMARY

Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…