What is the official website of Rakuten.ca ?

The official website of Rakuten.ca is http://www.rakuten.ca.

What is Rakuten.ca's cybersecurity risk score?

Rakuten.ca has an AI-generated cybersecurity risk score of 752 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Rakuten.ca experienced?

According to Rankiteo, Rakuten.ca currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Rakuten.ca been affected by any supply chain cyber incidents ?

According to Rankiteo, Rakuten.ca has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Rakuten.ca have SOC 2 Type 1 certification ?

According to Rankiteo, Rakuten.ca is not certified under SOC 2 Type 1.

Does Rakuten.ca have SOC 2 Type 2 certification ?

According to Rankiteo, Rakuten.ca does not hold a SOC 2 Type 2 certification.

Does Rakuten.ca comply with GDPR ?

According to Rankiteo, Rakuten.ca is not listed as GDPR compliant.

Does Rakuten.ca have PCI DSS certification ?

According to Rankiteo, Rakuten.ca does not currently maintain PCI DSS compliance.

Does Rakuten.ca comply with HIPAA ?

According to Rankiteo, Rakuten.ca is not compliant with HIPAA regulations.

Does Rakuten.ca have ISO 27001 certification ?

According to Rankiteo,Rakuten.ca is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Rakuten.ca operate in ?

Rakuten.ca operates primarily in the Technology, Information and Internet industry.

How many employees does Rakuten.ca have ?

Rakuten.ca employs approximately 14 people worldwide.

Does Rakuten.ca own any subsidiaries ?

Rakuten.ca presently has no subsidiaries across any sectors.

How many LinkedIn followers does Rakuten.ca have ?

Rakuten.ca's official LinkedIn profile has approximately 1,815 followers.

Does Rakuten.ca have a Crunchbase profile ?

No, Rakuten.ca does not have a profile on Crunchbase.

Does Rakuten.ca have a LinkedIn profile ?

Yes, Rakuten.ca maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/rakuten-canada.

How many cybersecurity incidents has Rakuten.ca experienced ?

As of July 1, 2026, Rankiteo reports that Rakuten.ca has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Rakuten.ca have ?

Rakuten.ca has an estimated 14,875 peer or competitor companies worldwide.

What types of cybersecurity incidents has Rakuten.ca faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Rakuten.ca

Boost Score +25 with badge (5 left)

752

/1000

Fair

777

/1000

Fair

Rakuten.ca Vendor Cyber Rating & Cyber Score

rakuten.ca

Add Your Compliance Badge

Rakuten.ca has helped its 7+ million members earn over $70 million in Cash Back. By connecting shoppers with top brands they already know and love, we provide Cash Back on everything from travel, luxury products, gift cards and everyday essentials, while our retail partners find new loyal customers and drive record sales. With over 750 stores, everyone is bound to find one of their favourites, or something new on Rakuten.ca! Launched in August 2012 in Toronto, Ontario, Rakuten.ca is the largest Cash Back shopping site in Canada. In 2014, Ebates Inc. joined the Rakuten family of companies, a multi-national corporation with businesses in 29 countries. Our members love us (& their #BigFatCheque) because we help them shop and discover

Rakuten.ca A.I CyberSecurity Scoring

Scoring History

Rakuten.ca

Rakuten.ca CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Rakuten

Cyber Attack

5/2026

RAK1777977150

Rakuten.ca

Breach

1/2021

RAK256082125

Rakuten.ca

Breach

4/2018

SHO245072625

Loading…

A.I.

Rakuten.ca Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Rakuten.ca

Incidents vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Rakuten.ca in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Rakuten.ca in 2026.

Incident Types Rakuten.ca vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Rakuten.ca in 2026.

Incident History - Rakuten.ca (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Rakuten.ca Subsidiaries

Rakuten.ca

Technology, Information and Internet

Website: http://www.rakuten.ca

Company Size: 14

Rakuten RewardsTechnology, Information and Internet

Rakuten InternationalSoftware Development

RakutenSoftware Development

Rakuten Asia Pte LtdSoftware Development

Rakuten Mobile, Inc.Telecommunications

Rakuten EuropeTechnology, Information and Internet

Rakuten CloudIT Services and IT Consulting

Rakuten VikiEntertainment Providers

Rakuten AdvertisingSoftware Development

Rakuten InteractiveTechnology, Information and Internet

Rakuten Group – Ichiba JapanTechnology, Information and Internet

EbatesTechnology, Information and Internet

ShopStyleApparel & Fashion

Cartera – A Rakuten CompanyTechnology, Information and Internet

Loading…

Rakuten.ca Similar Companies

Booking Holdings (NASDAQ: BKNG)

cb bookingholdings.com

Booking Holdings is the world’s leading provider of online travel & related services, provided to consumers and local partners in more than 220 countries and territories through six primary consumer-facing brands: Booking.com, Priceline, Agoda, Rentalcars.com, KAYAK and OpenTable. Collectively, Booking Holdings operates in more than 40 languages across Europe, North America, South America, the Asia-Pacific region, the Middle East and Africa. The mission of Booking Holdings is to make it easier for everyone to experience the world.

Mynet

mynet.com

Türk internet kullanıcılarının en çok tercih ettiği dijital platform olan Mynet, 1999 yılından bugüne liderliğini koruyor. Kendi alanında sayısız ilki gerçekleştiren öncü internet devi Mynet, Türkiye'nin dijital ekosisteminin kalkınmasına ve gelişmesine destek olmayı sürdürüyor. Her ay ortalama 42 milyon internet kullanıcısına erişen Mynet'in sosyal ağlardaki toplam kitlesi ise 10 milyonu geride bırakmış bulunuyor. Mynet, ziyaretçilerine her ay 100 milyondan fazla video izletiyor. 1 milyonun üzerinde kullanıcısı olan Türkiye’nin en büyük online video eğitim platformu Vidobu ile Türkçe bilen tüm coğrafyanın ihtiyacı olan eğitimleri, alanında uzman eğitmenler ile veriyor. Böylece yüksek kalitedeki eğitimlerin herkes tarafından, her yerden ve düşük maliyetle erişilebilir olmasını sağlıyor. Ayrıca Vidobu, eğitim sektöründeki Global SAAS projesi olan Corviq ile kurumların kendi özel video öğrenme platformlarını oluşturmasını sağlayan bir altyapı da sunuyor. En büyük oyun stüdyolarından biri olan Mynet Games adı altında yayınladığı oyunlarla 10 milyondan fazla oyuncuyla buluşuyor. Kelime Savaşı oyunu Apple tarafından PubG ve Subway Surfers ile birlikte 2019’un en çok indirilen 3 oyunundan biri olarak açıklandı. ABD pazarına sunduğumuz Homer City, HR Master ve Racing Wheels adlı oyunlarımız dünya sıralamasında zirvede yer almıştır. ABD pazarına hybrid-casual’dan mid-core oyunlara kadar oyun geliştiren CASUAL MONSTER ve RARE FORGE şirketlerimiz ile de oyun sektöründe büyümeye devam ediyoruz.

Independiente / Freelance

wikipedia.org

La etimología de la palabra deriva del término medieval inglés usado para un mercenario (free-independiente o lance-lanza), es decir, un caballero que no servía a ningún señor en concreto y cuyos servicios podían ser alquilados por cualquiera. El término fue acuñado inicialmente por Sir Walter Scott (1771-1832) en su reconocido romance histórico Ivanhoe para describir a un "guerrero medieval mercenario". La frase en inglés luego hizo la transición a un sustantivo figurativo alrededor de 1860 y fue luego reconocido como un verbo oficialmente en 1903 por varias autoridades en lingüística tales como el Diccionario Oxford de Inglés. Solamente en tiempos modernos ha mutado el término de un sustantivo (un freelance o un freelancer) y un adverbio (un periodista que trabaja freelance). Esta palabra es empleada como anglicismo en castellano como dos palabras separadas "free lance" (del inglés) o autónomo pero no tiene aplicación como verbo. Fuente: Wikipedia. https://es.wikipedia.org/wiki/Freelance Acerca de Independiente / Freelance Somos una de las comunidades de habla hispana más grandes en LinkedIn para profesionales que eligen trabajar de forma independiente. Un espacio para conectar, compartir recursos y encontrar oportunidades. Publicaciones para Empresas y Reclutadores. Para publicar una búsqueda de talento, por favor envíe los detalles de la oferta a: [email protected] El proceso es simple y asincrónico.

Cimpress

cb cimpress.com

Cimpress plc (Nasdaq: CMPR) invests in and builds customer-focused, entrepreneurial, mass-customization businesses for the long term. Mass customization is a competitive strategy which seeks to produce goods and services to meet individual customer needs with near mass production efficiency. Cimpress is a strategically-focused group of more than a dozen businesses, each operating in a largely autonomous manner other than as it relates to the select few shared strategic and corporate activities that we maintain centrally. Cimpress businesses include Drukwerkdeal, Exaprint, National Pen, Pixartprinting, Printi, Vistaprint and WIRmachenDRUCK. Founded by Robert Keane, who remains President & CEO today, the company has been passionate about empowering people to make an impression through individually meaningful, personalized physical products for more than 20 years. To learn more, visit http://www.cimpress.com.

YouTube

cb youtube.com

YouTube is a team-oriented, creative workplace where every single employee has a voice in the choices we make and the features we implement. We work together in small teams to design, develop, and roll out key features and products in very short time frames. Which means something you write today could be seen by millions of viewers tomorrow. And even though we’re a part of Google and enjoy all of the corporate perks, it still feels like you’re working at a startup. YouTube is headquartered in San Bruno, California, 12 miles south of San Francisco. We also have many job openings in Mountain View, and across the globe

Fanatics

fanaticsinc.com

Fanatics is a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

Akamai Technologies

akamai.com

At Akamai, we make life better for billions of people, billions of times a day. Every day, billions of people around the world connect with their favorite brands to shop online, play the latest video games, log into mobile banking apps, learn remotely, share videos with friends, and so much more. They may not know it, but Akamai is there, powering and protecting life online. Over 20 years ago, we set out to solve the toughest challenge of the early internet: the “World Wide Wait.” And we’ve been solving the internet’s toughest challenges ever since, working toward our vision of a safer and more connected world. With the world’s most distributed compute platform — from cloud to edge — we make it easy for businesses to develop and run applications, while we keep experiences closer to users and threats farther away. That’s why innovative companies worldwide choose Akamai to build, deliver, and secure their digital experiences. Our leading security, compute, and delivery solutions are helping global companies make life better for billions of people, billions of times a day. Devoted, determined problem-solvers who share a passion for technology, we’re always pushing ground-breaking ideas and driving innovation. Want to power and protect life online, by solving the toughest challenges? Be part of an amazing team. Let’s connect: LinkedIn: https://www.linkedin.com/company/akamai-technologies Twitter: https://twitter.com/Akamai Blog: https://www.akamai.com/blog

Avnet

avnet.com

Avnet is a global electronic components distributor with extensive design, product, marketing and supply chain expertise for customers and suppliers at every stage of the product lifecycle. For the past 100 years, Avnet has helped its customers and suppliers around the world realize the transformative possibilities of technology. Our culture was founded on new ideas and emerging technology. Headquartered in Phoenix, Arizona, Avnet is a leading global technology distributor and solutions provider at the center of the technology value chain. Founded in 1921, we work with suppliers in every major technology segment to serve customers worldwide across a broad range of markets. Whether working on large-scale production or early prototypes, we meet customer needs through individualized, end-to-end service to streamline solutions and improve efficiency for customers worldwide. We serve more than 1 million customers in more than 140 countries and partner with global suppliers from almost every technology segment. Learn more about Avnet at www.avnet.com.

Peraton

peraton.com

At Peraton, we're at the forefront of delivering the next big thing every day. We're the partner of choice to help solve some of the world's most daunting challenges, delivering bold, new solutions to keep people around the world safer and more secure. How do we do it? By thinking differently. We're not mired in the past. We look at all problems with fresh eyes. We look past the obvious to bring the best talent, tech, and ideas together to completely transform how things get done. So bring your unique ideas, your entrepreneurial spirit, and your drive to succeed and get ready to be part of something bigger. Get ready to do the can't be done. ________ Recruitment fraud is a growing trend where fraudsters have been known to attempt to use our name to trick job seekers with fake employment opportunities. This type of scam is typically carried out through fake job postings, fake websites, or email accounts claiming to be from Peraton. The intent of recruitment fraud is to gain access to your personal information, such as your banking information, credit card number, or social security number. Please be aware that our careers site can be found at careers.peraton.com and our corporate site can be found at peraton.com. To learn more about Recruitment fraud and what to expect and not to expect from a Peraton recruiter, please visit: https://careers.peraton.com/recruitment-fraud/

Loading…

NEWS

Rakuten.ca CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 28, 2025 07:00 AM

ClassNK backs Rakuten Maritime’s cybersecurity tool

ClassNK has awarded its Innovation Endorsement for Products & Solutions to 'CYTUR-MCTI', a maritime cybersecurity tool developed by CYTUR.

Read Article

July 28, 2025 07:00 AM

Rakuten Maritime Receives Third Innovation Endorsement from ClassNK for Cyber Threat Intelligence

ClassNK certifies CYTUR-MCTI (Maritime Cyber Threat Intelligence), a core module created by CYTUR, for real-time cyber threat intelligence,...

Read Article

April 25, 2025 07:00 AM

Rakuten Mobile, Cloudflare team up on SME security

Rakuten Mobile partners with Cloudflare to offer managed Zero Trust security services, enhancing digital transformation for Japan's SMEs...

Read Article

April 23, 2025 07:00 AM

Rakuten Mobile and Cloudflare Partner to Deliver Managed Security Services Across Japan

Rakuten Mobile becomes Japan's first MSSP partner with Cloudflare to empower corporate clients with Zero Trust security solutions.

Read Article

May 17, 2020 07:00 AM

JD.com and Rakuten partner to use delivery robots and drones in Japan

Chinese e-commerce company, JD.com, is taking its drone delivery system to Japan after forging a partnership with Rakuten Inc. By teaming up...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-8023

SUMMARY

Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that serves files from a configured root directory. Before this fix, both the HTTP/1 and HTTP/2 front-ends placed the raw, attacker-controlled request path into client-url_buffer (assembled in on_url() for HTTP/1 and copied verbatim from the :path pseudo-header for HTTP/2) without resolving ./.. segments. The static-FS handler then built the on-disk filename by directly concatenating the configured root with that raw URL (snprintk(fname, ..., "%s%s", static_fs_detail-fs_path, client-url_buffer) at http_server_http1.c:603 and http_server_http2.c:490) and opened it with fs_open(fname, FS_O_READ). Because the handler is reached via wildcard/leading-dir (fnmatch FNM_LEADING_DIR) or fallback resource matching, a request such as GET /<prefix/../../<file is dispatched to the handler and, after the underlying filesystem (e.g. LittleFS/FAT) resolves the .. segments, escapes the configured web root, letting an unauthenticated remote client read arbitrary readable files on the mounted volume (information disclosure). The HTTP server requires no TLS or authentication to reach this path. The fix adds http_server_remove_dot_segments(), which canonicalizes the path portion of the URL before resource lookup in both protocol handlers, neutralizing the traversal. Affects releases v4.0.0 through v4.4.0 for deployments that register a static-filesystem resource.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-7656

SUMMARY

The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) used an incorrect boolean expression that combined the RFC 4861 validity checks with the ICMPv6 code check using the wrong operator precedence: the form was '((length/hop/source/target checks) && (icmp_hdr-code != 0))'. Because every legitimate ND message carries ICMPv6 code 0, an attacker setting code == 0 (the normal value) caused the entire predicate to evaluate false, so the packet was never dropped and all of the other checks were silently skipped. The bypassed checks include the mandatory Hop Limit == 255 verification (which proves an ND packet originated on-link and was not forwarded) and, for Router Advertisements, the requirement that the source be a link-local address, as well as multicast-target sanity checks. As a result, an adjacent on-link attacker — and, because the Hop-Limit-255 guard is bypassed, potentially a remote/off-link attacker whose packets would otherwise be rejected — can have forged Router Advertisement, Neighbor Solicitation, and Neighbor Advertisement messages accepted. A forged RA lets the attacker reconfigure the victim's default router, on-link prefixes (SLAAC), MTU, reachable/retransmit timers, and (with CONFIG_NET_IPV6_RA_RDNSS) DNS servers, while forged NS/NA enable neighbor-cache poisoning, enabling man-in-the-middle, traffic redirection, and denial of service. The flaw is an input-validation/authentication weakness rather than a memory-safety issue: the underlying packet-parsing primitives (net_pkt_get_data, net_pkt_read, net_pkt_skip) are independently bounds-safe and the validated 'length' is the true buffer length, so skipping the length check causes no out-of-bounds access. The defect has existed since the logic was introduced in 2018 and shipped in all releases through v4.4.0; it is fixed by splitting the condition so any failing check drops the packet.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

2.8

REFERENCES

CVE-2026-51219

SUMMARY

A heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 v2.3.3 to v2.3.6 allows attackers to cause a Denial of Service (DoS) via a crafted payload.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-51218

SUMMARY

A heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7_server.cpp) of snap7 v1.4.3 allows attackers to cause a Denial of Service (DoS) via a crafted packet.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-10648

SUMMARY

mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() on the result of smp_packet_alloc() before checking it for NULL. smp_packet_alloc() uses net_buf_alloc(K_NO_WAIT) against the shared MCUmgr packet pool (CONFIG_MCUMGR_TRANSPORT_NETBUF_COUNT, default 4), which returns NULL when the pool is exhausted. In default builds the __ASSERT_NO_MSG in net_buf_reset is a no-op, so net_buf_simple_reset writes through the NULL pointer (buf->len = 0; buf->data = buf->__buf), causing a fault/crash. The fragment data reaches this code from attacker-controlled bytes on the MCUmgr serial/UART/shell-console transports (smp_uart.c, smp_raw_uart.c, smp_shell.c), and a fresh buffer is allocated at the start of essentially every new packet. An attacker on the serial/console link can flood the transport to drive the 4-entry buffer pool to exhaustion and induce the NULL dereference, crashing the device (denial of service). The defect was introduced after the original MCUmgr rework and shipped in Zephyr v4.4.0. The fix moves the NULL check ahead of net_buf_reset.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: 6.2)

cvss3

Base Score: 6.2

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.5

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…