What is the official website of PFI ?

The official website of PFI is https://www.pfie.com/.

What is PFI's cybersecurity risk score?

PFI has an AI-generated cybersecurity risk score of 755 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has PFI experienced?

According to Rankiteo, PFI currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has PFI been affected by any supply chain cyber incidents ?

According to Rankiteo, PFI has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Collins Aerospace (Incident ID: BRU0093500092025) Collins Aerospace (Incident ID: COL5132151100225)

Does PFI have SOC 2 Type 1 certification ?

According to Rankiteo, PFI is not certified under SOC 2 Type 1.

Does PFI have SOC 2 Type 2 certification ?

According to Rankiteo, PFI does not hold a SOC 2 Type 2 certification.

Does PFI comply with GDPR ?

According to Rankiteo, PFI is not listed as GDPR compliant.

Does PFI have PCI DSS certification ?

According to Rankiteo, PFI does not currently maintain PCI DSS compliance.

Does PFI comply with HIPAA ?

According to Rankiteo, PFI is not compliant with HIPAA regulations.

Does PFI have ISO 27001 certification ?

According to Rankiteo,PFI is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does PFI operate in ?

PFI operates primarily in the Financial Services industry.

How many employees does PFI have ?

PFI employs approximately None employees people worldwide.

Does PFI own any subsidiaries ?

PFI presently has no subsidiaries across any sectors.

How many LinkedIn followers does PFI have ?

PFI's official LinkedIn profile has approximately 1,656 followers.

What is the NAICS classification code for PFI ?

PFI is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does PFI have a Crunchbase profile ?

No, PFI does not have a profile on Crunchbase.

Does PFI have a LinkedIn profile ?

Yes, PFI maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/projectfinanceinternational.

How many cybersecurity incidents has PFI experienced ?

As of August 23, 2026, Rankiteo reports that PFI has experienced 2 cybersecurity incidents.

How many peer or competitor companies does PFI have ?

PFI has an estimated 32,571 peer or competitor companies worldwide.

What types of cybersecurity incidents has PFI faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

PFI

Boost Score +25 with badge (5 left)

755

/1000

Fair

780

/1000

Fair

PFI Vendor Cyber Rating & Cyber Score

pfie.com

Add Your Compliance Badge

Project Finance International (PFI) has been at the forefront of project finance reporting for the last 25 years. It is the most comprehensive and authoritative publication to serve the industry, covering all the major sectors, including transport, power, oil & gas, infrastructure and mining. PFI reports on the entire lifecycles of deals, from the initial rumours through to post-completion analysis. Project finance professionals around the globe rely on PFI’s deal analysis to identify opportunities and track their competitors.

PFI A.I CyberSecurity Scoring

Scoring History

PFI

PFI CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

LSEG

Cyber Attack

100

9/2025

Collins Aerospa...

BRU009350009202...

LSEG

Ransomware

100

6/2025

Collins Aerospa...

COL513215110022...

Loading…

A.I.

PFI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for PFI

Incidents vs Financial Services Industry Avg (This Year)

No incidents recorded for PFI in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for PFI in 2026.

Incident Types PFI vs Financial Services Industry Avg (This Year)

No incidents recorded for PFI in 2026.

Incident History - PFI (X = Date, Y = Severity)

Loading…

SUBSIDIARY

PFI Subsidiaries

PFI

Financial Services

Website: https://www.pfie.com/

Company Size: 10,001+ employees

LSEG (London Stock Exchange Group)Financial Services

LSEG Data & AnalyticsFinancial Services

Workspace - Refinitiv, an LSEG businessFinancial Services

LSEG Workspace Financial Services

Asset Management - Refinitiv, an LSEG businessFinancial Services

Investment Banking - Refinitiv, an LSEG businessFinancial Services

LSEG LPCFinancial Services

London Stock ExchangeFinancial Services

LCHFinancial Services

FTSE Russell, An LSEG BusinessFinancial Services

Loading…

PFI Similar Companies

Old Mutual South Africa

oldmutual.co.za

Old Mutual Limited is a premium pan-African financial services group that offers a broad spectrum of financial solutions to retail and corporate customers across key markets in 14 countries. We have been helping our customers achieve their lifetime financial goals for over 170 years by investing their funds in ways that create positive futures for them, their families, their communities and broader society. In this way, we significantly contribute to improving the lives of our customers and their communities while ensuring a sustainable future for our business. We employ more than 30 000 people and operate in 14 countries across two regions Africa (South Africa, Namibia, Botswana, Zimbabwe, Kenya, Malawi, Tanzania, Nigeria, Ghana, Uganda, Rwanda, South Sudan and eSwatini) as well as Asia (China) So why work here? We believe you can shape the future with us – a future where we build a better Africa together. That’s why we’re committed to creating opportunities that will give you an edge on the rest. Once you’re part of our team, you will have access to the best breed of advice, tools and frameworks that will equip you to be your exceptional best. #MomentsThatMatter

Goldman Sachs

cb goldmansachs.com

We aspire to be the world’s most exceptional financial institution, united by our shared values of partnership, client service, integrity, and excellence. Operating at the center of capital markets, we act as one firm, mobilizing our people, capital, and ideas to deliver superior results across our clients’ most complex challenges. For 156 years, Goldman Sachs has delivered world-class execution on a global scale across our leading Global Banking & Markets and Asset & Wealth Management businesses. Apprenticeship is central to our culture, with hands-on coaching and access to leaders who bring decades of experience and expertise. With office locations around the world, we offer a broad range of career opportunities to those who insist on excellence and thrive on performance. Find our Social Media Disclosures here: gs.com/social-media-disclosures

Capital Group

capitalgroup.com

Capital Group was established in 1931 in Los Angeles, California, and now has 31 offices around the globe. For over 90 years we've provided carefully researched investment solutions and services to financial professionals. *** We've been made aware of an employment scam fraudulently using Capital Group's name. Please note: Capital Group currently does not offer 100% remote work positions. On average, the interview process can take one to three months to go from resume submission to offer. Financial transactions are never part of the job on boarding process. For your own cyber safety and security, if you suspect fraud, please do not respond to or interact with messages claiming to be from Capital Group. You can also contact [email protected] to verify a job opportunity.*** This content is published by Capital Group, home of American Funds Distributors, Inc. which will be renamed Capital Client Group, Inc. on or around July 1, 2024. For important legal information please click the company details website link: https://www.capitalgroup.com/us/landing-pages/linkedin-terms-of-use.html

Barclays Investment Bank

barclays.com

Barclays Investment Bank deploys financial solutions to help our clients with their funding, financing, strategic and risk management needs across sectors, markets and economies. The Investment Bank is comprised of the Investment Banking, International Corporate Banking, Global Markets and Research businesses, aiding money managers, financial institutions, governments, supranational organisations and corporate clients around the globe. We offer a full spectrum of strategic advisory, financing and risk management solutions to help drive innovation and growth. For over 330 years, our commitment to shared success has been at the heart of what we do, because we are all at our best when we all progress. For further information about Barclays Investment Bank, please visit our website www.barclays.com/ib

Western Union

westernunion.com

Many know us as the most trusted way to send money to friends and family overseas and across borders, but we're much more than that. Our talented teams around the world are building new ways to send, save and spend money. Wherever you are in the world, in whatever currency you choose, we're evolving our services to meet the demands of tomorrow. We're here for what's next. When our teams make more financial services accessible to people everywhere, we help more people prosper, transforming lives and communities.

Postal Savings Bank of China Co., Ltd.

psbc.com

Postal Savings Bank of China Co., Ltd. also known as PSBC is a commercial retail bank founded in 2007 and headquartered in Beijing. It provides basic financial services, especially to small and medium enterprises, rural[1] and low income customers. As of December 31, 2017, PSBC has 39,798[2] branches covering all regions of China. PSBC was set up with an initial capital of RMB20 billion in 2007 from the State Post Bureau. Today it has RMB1.5 trillion in deposits and the second largest number of branches, after the Agricultural Bank of China. During the Global Financial Crisis, the government took several measures to spread its national economic stimulus plan specifically to rural areas. This included using microfinance services provided by the Postal Savings Bank as a tool for national development and poverty reduction. The bank with its extremely broad reach also assists China’s credit cooperatives in their microcredit schemes. On December 8, 2015, China Postal Savings Bank, through issuing pro-float stock, received an injection of investment from the Temasek Holdings of Singapore, UBS, the Canada Pension Plan Investment Board, the International Finance Corporation, Morgan Stanley, DBS Bank, Tencent, Ant Financial Services Group, China Life and China Telecom, with a total investment of 45.1 billion yuan. These "strategic investors" together held a 16.92% stake in the company at the time of purchase. The stock was listed through an initial public offering on the Stock Exchange of Hong Kong on September 30, 2016. Prior to its listing, it was the largest unlisted Chinese bank.[3] Xuewen Zhang and Hong Lao serve as Vice Presidents of the bank and co-executive directors.

Empower

empower.com

At Empower, we’ve always been guided by strong values with a focus on helping people achieve the financial freedom they deserve. It’s been an incredible journey so far, but our story is just getting started. From the very beginning, we’ve prided ourselves on putting our customers first in everything we do — which will never change. The genesis of Empower dates back to 1891, when our parent company was founded as an insurance firm on the Canadian prairie. After more than a century of expansion and a profound evolution of service offerings, the modern iteration of Empower was launched in 2014. Our past is a big part of who we are as a business, but we continue to invest heavily in our current principles and future endeavors. Today, as the second-largest recordkeeper¹ in the U.S. and a comprehensive wealth management leader, we proudly serve more than 19 million individuals and over 88,000 different organizations.² With a constant commitment to growth, innovation and technology, we are fully dedicated to transforming the lives of all Americans. Our personalized tools and solutions are aimed at helping everyone improve their financial confidence so they can pursue their passions and reach their unique goals. That’s our promise. ------------------------ Disclosures: https://www.empower.com/social-media/ ¹Pension & Investments DC Recordkeeper Survey (2024). Ranking measured by total number of participants as of December 2023. ²As of March 31, 2025.

Bloomberg

bloomberg.com

Bloomberg is a global leader in business and financial information, delivering trusted data, news, and insights that bring transparency and efficiency, and fairness to markets. We help connect influential communities across the global financial ecosystem via reliable technology solutions that enable our customers to make more informed decisions and foster better collaboration. We challenge the status quo through constant innovation. We collaborate broadly because we know that other perspectives matter. We put our customers first, as a guiding beacon. And we believe doing the right thing – by our people, our clients, and our communities – is the best thing for our business.

Piramal Finance

piramalfinance.com

Piramal Finance Limited (Formerly known as Piramal Capital & Housing Finance Limited), is engaged in financial services business. It provides both wholesale and retail funding opportunities within real estate and non-real estate sectors. We value your feedback, queries, and requests and always look for ways to enhance your experience. Our team is here to support you from Monday to Saturday between 10 AM to 7 PM. Feel free to call us at 1800 266 6444. Disclaimer: Please be cautious of fraudulent messages claiming to offer jobs or loans while impersonating Piramal Group on messaging platforms. It's important to note that we exclusively communicate through official channels. Should you encounter any suspicious messages, kindly disregard them and block the sender.

Loading…

NEWS

PFI CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 19, 2026 07:29 AM

India mounts proactive digital push to curb cybercrime

New Delhi, Feb 19: The advent of Artificial Intelligence (AI) has introduced rapid changes to the way in which the world is functioning.

Read Article

November 18, 2025 08:00 AM

ESTA pushes for harmonised European mobile crane inspection regime

The European association of abnormal road transport and mobile cranes (ESTA) is stepping up pressure on European and national regulatory...

Read Article

August 08, 2025 07:00 AM

Indian Govt Warns Against Using WhatsApp Web On Office Computers: Heres Why

"Your chats, personal files, and login credentials could be exposed to admin-level access, screen monitoring software, or malware or browser...

Read Article

June 28, 2025 05:05 PM

Payment Card Industry (PCI) Security Services | Cyber Risk

Kroll's Cyber Security experts understand your challenges as an organization processing payment card transactions. First and foremost, you need to protect...

Read Article

April 14, 2025 12:21 PM

Cybersecurity made in Morocco: Dataprotect’s winning strategy on the international stage

Ali El Azzouzi, CEO of Dataprotect, African leader in cybersecurity, shares his vision on the internationalization of his company after the opening of a new...

Read Article

April 11, 2025 07:00 AM

India’s high-tech war on terror: cyber intelligence, AI, and the Modi doctrine

India's counter-terrorism strategy has transitioned from reactive to proactive, leveraging cybersecurity, AI-driven intelligence,...

Read Article

October 20, 2023 11:40 AM

Viking Line Cyberattack: European Shipping Companies Hit

Discover how the massive Viking Line Cyberattack, has rocked most European shipping giants in our latest cybersecurity news update.

Read Article

March 04, 2020 10:16 AM

PBOC issues new specification on personal financial information

The PBOC Specification provides much more comprehensive guidance on PFI handling by financial institutions and their vendors or suppliers.

Read Article

June 19, 2015 05:07 AM

Awards & Rankings

White & Case wins six Deals of the Year at 2025 PFI Awards. Ranking. 19 February 2026. White & Case earns multiple Band 1 rankings in Chambers Germany 2026.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-78122

SUMMARY

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.8

REFERENCES

CVE-2026-78049

SUMMARY

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes of the file src/ClientServer/address_space/internal/sopc_node_mgt_helper_internal.c of the component AddNodes Service. The manipulation of the argument UserAccessLevel leads to out-of-bounds read. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is aafbd37d381b618312ebdf5ddf57027f62c14fdd. It is suggested to install a patch to address this issue.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 3.7)

cvss2

Base Score: 2.6

Complexity: HIGH

AV:N/AC:H/Au:N/C:N/I:N/A:P

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 2.9

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-12999

SUMMARY

The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a net_buf from the fixed airoc_pool for every outbound packet. When whd_network_send_ethernet_data() returns a synchronous failure, the underlying WHD library does not take ownership of the buffer, but the pre-fix driver returned -EIO without releasing it. Each failed transmit therefore permanently leaks one buffer from the pool. airoc_pool is small and fixed (AIROC_WIFI_TX_PACKET_POOL_COUNT + AIROC_WIFI_RX_PACKET_POOL_COUNT, default 20 buffers) and is shared by WHD's whd_host_buffer_get callback for both transmit and receive. Once enough send failures have leaked the pool dry, airoc_wifi_host_buffer_get() returns WHD_BUFFER_ALLOC_FAIL for all subsequent allocations, so both transmit and the WHD-driven receive path fail and Wi-Fi connectivity is lost until the device is rebooted. The leak occurs only on the transmit error path. A Wi-Fi-adjacent attacker can influence the conditions that cause synchronous send failures (for example by deauthenticating/disassociating the station while the local stack continues to attempt transmits), and ordinary transient failures over the device's lifetime accumulate toward the same state. Reliable on-demand triggering is of high complexity and the impact is availability-only, but the resulting denial of service is permanent and non-recoverable without a reboot. The fix releases the buffer with airoc_wifi_buffer_release() on the failure branch, returning it to the pool. The commit also removes a redundant k_sem_give() in airoc_mgmt_disconnect(); because data->sema_common is a binary semaphore (limit 1) the duplicate give merely saturated at 1 and had no security impact.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

1.6

REFERENCES

CVE-2026-74733

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to regmap functions (read or write) must hold the i2c_lock. The function pca953x_irq_bus_sync_unlock() did not do this, and it was therefore possible that multiple threads could cause an incorrect register to be read/written. A previous patch partly fixed this, but only protected the write to the interrupt mask register, and not the read from the direction register.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-74732

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110_set_avmute Some older DCE timing generators do not implement is_tg_enabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereference on Southern Islands dGPUs when turning the display off over HDMI. Check that tg and the required ops exist before waiting for frames. (cherry picked from commit 2686a0c0aaa07bec2e24131835cf27b5fd4935a5)

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…