What is the official website of Payment Source ?

The official website of Payment Source is https://www.paymentsource.ca.

What is Payment Source's cybersecurity risk score?

Payment Source has an AI-generated cybersecurity risk score of 753 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Payment Source experienced?

According to Rankiteo, Payment Source currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Payment Source been affected by any supply chain cyber incidents ?

According to Rankiteo, Payment Source has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Payment Source have SOC 2 Type 1 certification ?

According to Rankiteo, Payment Source is not certified under SOC 2 Type 1.

Does Payment Source have SOC 2 Type 2 certification ?

According to Rankiteo, Payment Source does not hold a SOC 2 Type 2 certification.

Does Payment Source comply with GDPR ?

According to Rankiteo, Payment Source is not listed as GDPR compliant.

Does Payment Source have PCI DSS certification ?

According to Rankiteo, Payment Source does not currently maintain PCI DSS compliance.

Does Payment Source comply with HIPAA ?

According to Rankiteo, Payment Source is not compliant with HIPAA regulations.

Does Payment Source have ISO 27001 certification ?

According to Rankiteo,Payment Source is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Payment Source operate in ?

Payment Source operates primarily in the Financial Services industry.

How many employees does Payment Source have ?

Payment Source employs approximately 50 people worldwide.

Does Payment Source own any subsidiaries ?

Payment Source presently has no subsidiaries across any sectors.

How many LinkedIn followers does Payment Source have ?

Payment Source's official LinkedIn profile has approximately 14,808 followers.

What is the NAICS classification code for Payment Source ?

Payment Source is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does Payment Source have a Crunchbase profile ?

No, Payment Source does not have a profile on Crunchbase.

Does Payment Source have a LinkedIn profile ?

Yes, Payment Source maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/payment-source-inc-.

How many cybersecurity incidents has Payment Source experienced ?

As of July 30, 2026, Rankiteo reports that Payment Source has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Payment Source have ?

Payment Source has an estimated 32,392 peer or competitor companies worldwide.

What types of cybersecurity incidents has Payment Source faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Payment Source

Boost Score +25 with badge (5 left)

753

/1000

Fair

778

/1000

Fair

Payment Source Vendor Cyber Rating & Cyber Score

paymentsource.ca

Add Your Compliance Badge

Payment Source is your processor for uniquely Canadian payments. We enable money in and money out via INTERAC e-Transfer, cash and debit (in-person at 6,000 locations coast to coast) and more. By partnering with us you'll get access to new customer segments through cost effective, tailored payment solutions. Recognized as one of Canada’s Best Managed companies, we currently work with organizations such as Canada Post Corporation, Canada Revenue Agency, Intuit, Mastercard, Visa and more.

Payment Source A.I CyberSecurity Scoring

Scoring History

Payment Source

Payment Source CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Payment Source

Breach

04/2018

REC154326622

Loading…

A.I.

Payment Source Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Payment Source

Incidents vs Financial Services Industry Avg (This Year)

No incidents recorded for Payment Source in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Payment Source in 2026.

Incident Types Payment Source vs Financial Services Industry Avg (This Year)

No incidents recorded for Payment Source in 2026.

Incident History - Payment Source (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Payment Source Subsidiaries

Payment Source

Financial Services

Website: https://www.paymentsource.ca

Company Size: 11-50 employees

MaRS Discovery DistrictIT Services and IT Consulting

DialogueHealth and Human Services

BorrowellFinancial Services

Deep GenomicsBiotechnology Research

RockMass TechnologiesMining

MMB NetworksInformation Technology & Services

Newtopia Inc.Health, Wellness & Fitness

AskuitySoftware Development

Peekapak | K12 Well-being EducationE-Learning Providers

Nudge, an Axonify companyInternet Publishing

ThinkData WorksData Infrastructure and Analytics

Lending LoopFinancial Services

Moka Financial TechnologiesFinancial Services

Recycle CoachEnvironmental Services

Recycling at WorkEnvironmental Services

Calendars, Magnets, Stickers and MoreEnvironmental Services

Mobile and Web AppsEnvironmental Services

PowerHub: Software for RenewablesSoftware Development

TaplyticsSoftware Development

PUSH (acquired by WHOOP)Spectator Sports

BioConnectIT Services and IT Consulting

TrendMDIT Services and IT Consulting

CCRMBiotechnology Research

Kepler Communications Inc.Telecommunications

PostBeyond by InfluitiveSoftware Development

ANVILPublic Safety

WealthscopeSoftware Development

CalendarHeroSoftware Development

MavennetIT Services and IT Consulting

OMXTechnology, Information and Internet

Nano Magnetics LtdManufacturing

QD Solar Inc.Nanotechnology Research

AquaMobile Inc.Wellness and Fitness Services

Sparq Systems Inc.Renewables & Environment

CybernetIQComputer Networking Products

GeneYouIn Inc.Biotechnology

PillcheckBiotechnology

Lucova Inc.IT Services and IT Consulting

Hot Pop FactoryDesign Services

OtoSim IncMedical Equipment Manufacturing

RithmTechnology, Information and Internet

Energent IncorporatedIT Services and IT Consulting

EnerMotion Inc.Environmental Services

Raise Your FlagIT Services and IT Consulting

Peak Power Energy IncProfessional Training and Coaching

NanoleafComputers and Electronics Manufacturing

Ample OrganicsInformation Technology & Services

Nest Wealth (Objectway Group)Financial Services

Smart NoraWellness and Fitness Services

SamplerTechnology, Information and Internet

WorkTango Inc.Human Resources Services

BlueDotData Infrastructure and Analytics

Ulula - An EcoVadis CompanySoftware Development

7D SurgicalMedical Equipment Manufacturing

SkyPrep LMSE-Learning Providers

TulipIT Services and IT Consulting

Tulip LatamServicios y consultoría de TI

North OneFinancial Services

e-ZincRenewables & Environment

Sensibill, a Q2 CompanyFinancial Services

Swift MedicalSoftware Development

PaySimplyFinancial Services

Now Prepay by Payment SourceFinancial Services

DirectPayFinancial Services

LoadhubFinancial Services

Loading…

Payment Source Similar Companies

Lloyds Banking Group

lloydsbankinggroup.com

Our purpose is Helping Britain Prosper. We do this by creating a more sustainable and inclusive future for people and businesses, shaping finance as a force for good. We're part of an ever-changing industry and are currently on a journey to shape the financial services of the future, whilst supporting our customers’ changing needs. The scale and reach of our Group means we can offer a broad range of opportunities to learn, grow and develop. Our values-led culture and approach to inclusion and diversity means we can all make a real difference together.

Empower

empower.com

At Empower, we’ve always been guided by strong values with a focus on helping people achieve the financial freedom they deserve. It’s been an incredible journey so far, but our story is just getting started. From the very beginning, we’ve prided ourselves on putting our customers first in everything we do — which will never change. The genesis of Empower dates back to 1891, when our parent company was founded as an insurance firm on the Canadian prairie. After more than a century of expansion and a profound evolution of service offerings, the modern iteration of Empower was launched in 2014. Our past is a big part of who we are as a business, but we continue to invest heavily in our current principles and future endeavors. Today, as the second-largest recordkeeper¹ in the U.S. and a comprehensive wealth management leader, we proudly serve more than 19 million individuals and over 88,000 different organizations.² With a constant commitment to growth, innovation and technology, we are fully dedicated to transforming the lives of all Americans. Our personalized tools and solutions are aimed at helping everyone improve their financial confidence so they can pursue their passions and reach their unique goals. That’s our promise. ------------------------ Disclosures: https://www.empower.com/social-media/ ¹Pension & Investments DC Recordkeeper Survey (2024). Ranking measured by total number of participants as of December 2023. ²As of March 31, 2025.

UBS

ubs.com

From gaining new experiences in different roles to acquiring fresh knowledge and skills – at UBS we believe that you should never stop growing and learning because life never stops teaching. We know that it's our people – with their unique backgrounds, skills, experience levels and interests – who drive our ongoing success. Ready to be part of #teamUBS and make an impact? Find out more at ubs.com/careers. UBS works with individuals, families, institutions, and corporations around the world to help answer some of life's questions – whether through award winning wealth management advisory, investment banking and asset management expertise, or private and corporate banking services in Switzerland*. In June 2023, Credit Suisse became a UBS Group company. With our large and diverse team operating internationally, we have a presence in all major financial centers in more than 50 countries. Although we all come from different backgrounds and specializations, two things unite us: the conviction that we’re stronger together, and the will and curiosity to constantly innovate. That’s the key to us unlocking our full potential (and what we look for in everyone who joins us). It’s also why we’re regularly recognized as an attractive employer.* * Our awards https://www.ubs.com/awards Social Media Legal Terms: http://www.ubs.com/social-legal

Absa Group

absa.africa

Absa Group Limited (Absa) has forged a new way of getting things done, driven by bravery and passion, with the readiness to realise growth on the African continent and beyond. We’re a truly African brand, inspired by the people we serve in Botswana, Ghana, Kenya, Mauritius, Mozambique, Seychelles, South Africa, Tanzania, Uganda, and Zambia. We also have representative offices in China, Namibia, Nigeria and the United States, as well as securities entities in the United Kingdom and the United States, along with technology support colleagues in the Czech Republic.

LPL Financial

lpl.com

LPL Financial Holdings Inc. (Nasdaq: LPLA) is among the fastest growing wealth management firms in the U.S. As a leader in the financial advisor-mediated marketplace, LPL supports over 29,000 financial advisors and the wealth management practices of approximately 1,100 financial institutions, servicing and custodying approximately $1.9 trillion in brokerage and advisory assets on behalf of approximately 7 million Americans. The firm provides a wide range of advisor affiliation models, investment solutions, fintech tools and practice management services, ensuring that advisors and institutions have the flexibility to choose the business model, services, and technology resources they need to run thriving businesses.

S&P Global

cb spglobal.com

S&P Global (NYSE: SPGI) enables businesses, governments, and individuals with trusted data, expertise and technology to make decisions with conviction. We are Advancing Essential Intelligence through world-leading benchmarks, data, and insights that customers need in order to plan confidently, act decisively, and thrive economically in a rapidly changing global landscape.   From helping our customers assess new investments across the capital and commodities markets to guiding them through the energy expansion, acceleration of artificial intelligence, and evolution of public and private markets, we enable the world's leading organizations to unlock opportunities, solve challenges, and plan for tomorrow – today. Learn more at www.spglobal.com. Recruitment Fraud Alert: If you receive an email from a https://www.linkedin.com/redir/suspicious-page?url=spglobalind%2ecom domain or any other regionally based domains, it is a scam and should be reported to [email protected]. S&P Global never requires any candidate to pay money for job applications, interviews, offer letters, “pre-employment training” or for equipment/delivery of equipment. Stay informed and protect yourself from recruitment fraud by reviewing our guidelines, fraudulent domains, and how to report suspicious activity here: https://www.spglobal.com/content/dam/spglobal/corporate/en/documents/careers/Corp_0525-Recruitment-Fraud-Alert.pdf

L&T Finance

ltfs.com

L&T Finance is one of the leading NBFCs offering a range of loans across Rural | Housing | Two-Wheeler | Personal & Business (SME) The company is promoted by Larsen and Toubro Ltd. (L&T), one of the largest conglomerates in India. LTF is publicly listed on both the exchanges of India - BSE & NSE and complies to the guidelines applicable to an NBFC- CIC. Headquartered in Mumbai, the company has been rated AAA, the highest credit rating for NBFCs by four leading rating agencies.

Commonwealth Bank

cb commbank.com.au

Australia’s leading provider of financial services including retail, premium, business and institutional banking, funds management, superannuation, insurance, investment and sharebroking products and services. We are a business with more than 800,000 shareholders and over 52,000 employees. We offer a full range of financial services to help all Australians build and manage their finances. Connect with us, we'd like to hear from you: facebook.com/commonwealthbank twitter.com/commbank youtube.com/commbank youtube.com/commbankbusiness instagram.com/commbank Our Community Guidelines can be found at: https://www.commbank.com.au/support/social-networks.html For information on our Privacy Policy visit https://www.commbank.com.au/support/privacy

Wells Fargo Advisors

wellsfargoadvisors.com

With financial advisors serving our clients in all 50 states, Wells Fargo Advisors is headquartered in St. Louis. At the end of the day, we help our clients succeed financially. For us – our Financial Advisors and thousands of other team members – it's a commitment. It's about honoring our relationship with clients and being fully invested in their success. Investors’ needs are more complex now than at any time in history. There are the usual concerns that investors can plan for, but there are also those events when life happens. That’s why investors are increasingly looking for advice they can trust from a financial services firm which has experience and expertise, and an uncompromising dedication to its clients. Opinions and comments expressed by LinkedIn Members are those of the persons submitting them and do not necessarily represent our views. Additional guidelines can be found on wfa.com/social. Investment and Insurance Products are: * Not Insured by the FDIC or Any Federal Government Agency * Not a Deposit or Other Obligation of, or Guaranteed by, the Bank or Any Bank Affiliate * Subject to Investment Risks, Including Possible Loss of the Principal Amount Invested Wells Fargo recognizes and values the diversity of its employees, customers and business partners. EOE, M/F/D/V. Wells Fargo Advisors is a trade name used by Wells Fargo Clearing Services, LLC and Wells Fargo Advisors Financial Network, LLC, Members SIPC, separate registered broker-dealers and non-bank affiliates of Wells Fargo & Company. © 2021 - 2025 Wells Fargo Clearing Services, LLC. All rights reserved. PM-09182026-6068127.2.1 Wells Fargo Investment Institute, Inc. (WFII) is a registered investment adviser and wholly-owned subsidiary of Wells Fargo Bank, N.A., a bank affiliate of Wells Fargo & Company.

Loading…

NEWS

Payment Source CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 21, 2026 11:42 PM

In ‘uncertain times,’ Arizona lawmakers introduce bill to improve voting access, cybersecurity

Arizona Secretary of State Adrian Fontes said new legislation called the "Voters First Act" would "ensure the resilience of our democracy."

Read Article

January 06, 2026 08:00 AM

Ransomware Trends, Statistics and Facts in 2026 | Informa TechTarget

The following statistics provide insight into the breadth and growing scale of ransomware threats: Verizon's "2025 Data Breach...

Read Article

January 04, 2026 08:00 AM

Healthcare Data Breach Statistics

In 2023, 725 data breaches were reported to OCR and across those breaches, more than 133 million records were exposed or impermissibly disclosed.

Read Article

December 29, 2025 08:00 AM

Ultimate Guide to Private & Anonymous Payments in 2026

This guide examines some of the best private and anonymous payment methods to retain privacy during financial transactions.

Read Article

December 23, 2025 08:00 AM

Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites

Cybersecurity researchers have discovered two malicious Google Chrome extensions with the same name and published by the same developer that...

Read Article

December 12, 2025 08:00 AM

$320,000 Paid Out at Zeroday.Cloud for Open Source Software Exploits

Researchers earned a total of $320000 at the Zeroday.Cloud live hacking competition of cloud security giant Wiz.

Read Article

November 17, 2025 08:00 AM

Nebraska AG’s Lawsuit Against Change Healthcare Survives Motion to Dismiss

A lawsuit filed by Nebraska Attorney General Mike Hilgers over the 2024 Change Healthcare data breach has been allowed to proceed after...

Read Article

November 13, 2025 08:00 AM

Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data

A Russian-speaking threat behind an ongoing, mass phishing campaign has registered more than 4,300 domain names since the start of the year.

Read Article

November 12, 2025 08:00 AM

Google Paid Out $458,000 at Live Hacking Event

Google handed out $458000 in bug bounty rewards at this year's bugSWAT hacking event, held during the ESCAL8 conference.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66064

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-66063

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-64863

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-62325

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-59921

SUMMARY

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.1

REFERENCES

https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…