ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

SCS is Las Vegas’ premier content creation, virtual event and live-streaming production facility. Show Creators Studios is an entertainment production studio and creative co-sharing work space located just minutes from the Las Vegas Strip. Contained with the 5,500 sqft space are fully equipped livestreaming, photographic and theatrical studios to make virtually any idea a reality, as well as presentation & event spaces, private offices, and artistic workshop. Owned and operated by career entertainers, Ian Herrington and Amanda Deacon, the focus is on providing the right atmosphere and support in a professional, intimate setting.

Show Creators Studios A.I CyberSecurity Scoring

SCS

Company Details

Linkedin ID:

show-creators-inc

Employees number:

3

Number of followers:

130

NAICS:

56192

Industry Type:

Events Services

Homepage:

ShowCreatorsStudios.com

IP Addresses:

0

Company ID:

SHO_1301038

Scan Status:

In-progress

AI scoreSCS Risk Score (AI oriented)

Between 600 and 649

https://images.rankiteo.com/companyimages/show-creators-inc.jpeg
SCS Events Services
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreSCS Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/show-creators-inc.jpeg
SCS Events Services
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

SCS Company CyberSecurity News & History

Past Incidents
1
Attack Types
1
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
Show Creators Studios: Coupang Faces U.S. Lawsuit Over Data BreachRansomware100512/2025
Rankiteo Explanation :
Attack threatening the organization's existence

Description: **Cyberattack Disrupts Major U.S. Healthcare Network, Exposing Patient Data** A ransomware attack on **Change Healthcare**, a key subsidiary of UnitedHealth Group, has severely disrupted operations across the U.S. healthcare system, causing widespread delays in prescription processing, insurance claims, and patient care. The incident, first detected on **February 21, 2024**, forced the company to take critical systems offline, affecting pharmacies, hospitals, and clinics nationwide. The attack has been attributed to the **BlackCat (ALPHV) ransomware group**, which claimed responsibility and allegedly exfiltrated sensitive data, including patient records and financial information. While UnitedHealth has not confirmed the extent of the breach, reports suggest the hackers may have stolen **terabytes of data**, raising concerns about potential identity theft and fraud. The fallout has been substantial: **pharmacies reported delays in filling prescriptions**, healthcare providers struggled with billing disruptions, and some patients faced out-of-pocket costs for medications. The American Hospital Association (AHA) warned of "significant financial strain" on providers, with some smaller clinics at risk of closure due to cash flow interruptions. UnitedHealth has since restored some services, but full recovery remains ongoing. The incident underscores the growing threat of ransomware to critical infrastructure, particularly in healthcare, where delays can directly impact patient safety. Federal agencies, including the **HHS and FBI**, are investigating the attack, while lawmakers have called for stricter cybersecurity regulations in the sector.

Show Creators Studios: Coupang Faces U.S. Lawsuit Over Data Breach
Ransomware
Severity: 100
Impact: 5
Seen: 12/2025
Blog:
Rankiteo Explanation
Attack threatening the organization's existence

Description: **Cyberattack Disrupts Major U.S. Healthcare Network, Exposing Patient Data** A ransomware attack on **Change Healthcare**, a key subsidiary of UnitedHealth Group, has severely disrupted operations across the U.S. healthcare system, causing widespread delays in prescription processing, insurance claims, and patient care. The incident, first detected on **February 21, 2024**, forced the company to take critical systems offline, affecting pharmacies, hospitals, and clinics nationwide. The attack has been attributed to the **BlackCat (ALPHV) ransomware group**, which claimed responsibility and allegedly exfiltrated sensitive data, including patient records and financial information. While UnitedHealth has not confirmed the extent of the breach, reports suggest the hackers may have stolen **terabytes of data**, raising concerns about potential identity theft and fraud. The fallout has been substantial: **pharmacies reported delays in filling prescriptions**, healthcare providers struggled with billing disruptions, and some patients faced out-of-pocket costs for medications. The American Hospital Association (AHA) warned of "significant financial strain" on providers, with some smaller clinics at risk of closure due to cash flow interruptions. UnitedHealth has since restored some services, but full recovery remains ongoing. The incident underscores the growing threat of ransomware to critical infrastructure, particularly in healthcare, where delays can directly impact patient safety. Federal agencies, including the **HHS and FBI**, are investigating the attack, while lawmakers have called for stricter cybersecurity regulations in the sector.

Ailogo

SCS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for SCS

Incidents vs Events Services Industry Average (This Year)

Show Creators Studios has 0.0% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Show Creators Studios has 53.85% more incidents than the average of all companies with at least one recorded incident.

Incident Types SCS vs Events Services Industry Avg (This Year)

Show Creators Studios reported 1 incidents this year: 0 cyber attacks, 1 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History — SCS (X = Date, Y = Severity)

SCS cyber incidents detection timeline including parent company and subsidiaries

SCS Company Subsidiaries

SubsidiaryImage

SCS is Las Vegas’ premier content creation, virtual event and live-streaming production facility. Show Creators Studios is an entertainment production studio and creative co-sharing work space located just minutes from the Las Vegas Strip. Contained with the 5,500 sqft space are fully equipped livestreaming, photographic and theatrical studios to make virtually any idea a reality, as well as presentation & event spaces, private offices, and artistic workshop. Owned and operated by career entertainers, Ian Herrington and Amanda Deacon, the focus is on providing the right atmosphere and support in a professional, intimate setting.

Loading...
similarCompanies

SCS Similar Companies

Encore is your full-service event production partner with more than 80 years of experience. Each year, Encore delivers more than 350,000 events in 20 countries across North America, Europe, the Middle East, Australia and Asia Pacific. Through event technology, rigging infrastructure, production an

newsone

SCS CyberSecurity News

July 30, 2025 07:00 AM
Amazon Invests in Fable: 'Netflix of AI' Generates Playable TV Shows

Amazon has invested in Fable, a start-up whose 'Netflix of AI' Showunner gen-AI tool lets users create scenes or entire episodes of a TV...

July 16, 2025 07:00 AM
2025 Microsoft Conference Calendar: For Partners, IT Pros and Developers

Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss.

July 10, 2025 07:00 AM
San Diego Comic-Con 2025 List of Announced Panels

The official San Diego Comic-Con schedule is normally released exactly two weeks before the convention (which would put this year's release...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

SCS CyberSecurity History Information

Official Website of Show Creators Studios

The official website of Show Creators Studios is http://www.ShowCreatorsStudios.com.

Show Creators Studios’s AI-Generated Cybersecurity Score

According to Rankiteo, Show Creators Studios’s AI-generated cybersecurity score is 643, reflecting their Poor security posture.

How many security badges does Show Creators Studios’ have ?

According to Rankiteo, Show Creators Studios currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Show Creators Studios have SOC 2 Type 1 certification ?

According to Rankiteo, Show Creators Studios is not certified under SOC 2 Type 1.

Does Show Creators Studios have SOC 2 Type 2 certification ?

According to Rankiteo, Show Creators Studios does not hold a SOC 2 Type 2 certification.

Does Show Creators Studios comply with GDPR ?

According to Rankiteo, Show Creators Studios is not listed as GDPR compliant.

Does Show Creators Studios have PCI DSS certification ?

According to Rankiteo, Show Creators Studios does not currently maintain PCI DSS compliance.

Does Show Creators Studios comply with HIPAA ?

According to Rankiteo, Show Creators Studios is not compliant with HIPAA regulations.

Does Show Creators Studios have ISO 27001 certification ?

According to Rankiteo,Show Creators Studios is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Show Creators Studios

Show Creators Studios operates primarily in the Events Services industry.

Number of Employees at Show Creators Studios

Show Creators Studios employs approximately 3 people worldwide.

Subsidiaries Owned by Show Creators Studios

Show Creators Studios presently has no subsidiaries across any sectors.

Show Creators Studios’s LinkedIn Followers

Show Creators Studios’s official LinkedIn profile has approximately 130 followers.

NAICS Classification of Show Creators Studios

Show Creators Studios is classified under the NAICS code 56192, which corresponds to Convention and Trade Show Organizers.

Show Creators Studios’s Presence on Crunchbase

No, Show Creators Studios does not have a profile on Crunchbase.

Show Creators Studios’s Presence on LinkedIn

Yes, Show Creators Studios maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/show-creators-inc.

Cybersecurity Incidents Involving Show Creators Studios

As of December 10, 2025, Rankiteo reports that Show Creators Studios has experienced 1 cybersecurity incidents.

Number of Peer and Competitor Companies

Show Creators Studios has an estimated 7,428 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Show Creators Studios ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

How does Show Creators Studios detect and respond to cybersecurity incidents ?

Detection and Response: The company detects and responds to cybersecurity incidents through an incident response plan activated with yes, and containment measures with shut down most systems, and recovery measures with ongoing, and communication strategy with public disclosure of the incident..

Incident Details

Can you provide details on each incident ?

Incident : Ransomware

Title: Ransomware Attack on CDK Global Disrupts Auto Dealerships Across North America

Description: CDK Global, a major provider of software solutions to automotive dealerships, suffered a ransomware attack that forced the company to shut down most of its systems. The incident caused widespread disruptions to dealership operations, including sales, financing, and service scheduling. The attack highlights the growing threat of ransomware to critical infrastructure providers and the cascading effects on downstream businesses.

Date Detected: 2024-06-19

Date Publicly Disclosed: 2024-06-19

Type: Ransomware

Attack Vector: Unknown

Motivation: Financial gain

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Ransomware.

Impact of the Incidents

What was the impact of each incident ?

Incident : Ransomware SHO1765339395

Systems Affected: CDK Global's software systems for auto dealerships

Downtime: Ongoing as of 2024-06-20

Operational Impact: Widespread disruptions to dealership operations, including sales, financing, and service scheduling

Brand Reputation Impact: Significant

Which entities were affected by each incident ?

Incident : Ransomware SHO1765339395

Entity Name: CDK Global

Entity Type: Software provider

Industry: Automotive technology

Location: North America

Size: Large

Customers Affected: Thousands of auto dealerships

Response to the Incidents

What measures were taken in response to each incident ?

Incident : Ransomware SHO1765339395

Incident Response Plan Activated: Yes

Containment Measures: Shut down most systems

Recovery Measures: Ongoing

Communication Strategy: Public disclosure of the incident

What is the company's incident response plan?

Incident Response Plan: The company's incident response plan is described as Yes.

Data Breach Information

What type of data was compromised in each breach ?

Incident : Ransomware SHO1765339395

Data Encryption: Yes

How does the company handle incidents involving personally identifiable information (PII) ?

Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by shut down most systems.

Ransomware Information

Was ransomware involved in any of the incidents ?

Incident : Ransomware SHO1765339395

Data Encryption: Yes

How does the company recover data encrypted by ransomware ?

Data Recovery from Ransomware: The company recovers data encrypted by ransomware through Ongoing.

References

Where can I find more information about each incident ?
Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: BleepingComputerUrl: https://www.bleepingcomputer.com/news/security/cdk-global-ransomware-attack-disrupts-auto-dealerships-across-north-america/Date Accessed: 2024-06-20.

Investigation Status

What is the current status of the investigation for each incident ?

Incident : Ransomware SHO1765339395

Investigation Status: Ongoing

How does the company communicate the status of incident investigations to stakeholders ?

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Public disclosure of the incident.

Stakeholder and Customer Advisories

Were there any advisories issued to stakeholders or customers for each incident ?

Incident : Ransomware SHO1765339395

Customer Advisories: Public disclosure of the incident

What advisories does the company provide to stakeholders and customers following an incident ?

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: was Public disclosure of the incident.

Additional Questions

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2024-06-19.

What was the most recent incident publicly disclosed ?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2024-06-19.

Impact of the Incidents

Response to the Incidents

What containment measures were taken in the most recent incident ?

Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was Shut down most systems.

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident is BleepingComputer.

What is the most recent URL for additional resources on cybersecurity best practices ?

Most Recent URL for Additional Resources: The most recent URL for additional resources on cybersecurity best practices is https://www.bleepingcomputer.com/news/security/cdk-global-ransomware-attack-disrupts-auto-dealerships-across-north-america/ .

Investigation Status

What is the current status of the most recent investigation ?

Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing.

Stakeholder and Customer Advisories

What was the most recent customer advisory issued ?

Most Recent Customer Advisory: The most recent customer advisory issued was an Public disclosure of the incident.

cve

Latest Global CVEs (Not Company-Specific)

Description

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain a Stored Cross-Site Scripting (XSS) vulnerability in the /WeGIA/html/geral/configurar_senhas.php endpoint. The application does not sanitize user-controlled data before rendering it inside the employee selection dropdown. The application retrieves employee names from the database and injects them directly into HTML <option> elements without proper escaping. This issue is fixed in version 3.5.5.

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

ZITADEL is an open-source identity infrastructure tool. Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XSS through the Zitadel V2 logout endpoint. The /logout endpoint insecurely routes to a value that is supplied in the post_logout_redirect GET parameter. As a result, unauthenticated remote attacker can execute malicious JS code on Zitadel users’ browsers. To carry out an attack, multiple user sessions need to be active in the same browser, however, account takeover is mitigated when using Multi-Factor Authentication (MFA) or Passwordless authentication. This issue is fixed in version 4.7.1.

Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Description

ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability. The ZITADEL Login UI (V2) treats the x-zitadel-forward-host header as a trusted fallback for all deployments, including self-hosted instances. This allows an unauthenticated attacker to force the server to make HTTP requests to arbitrary domains, such as internal addresses, and read the responses, enabling data exfiltration and bypassing network-segmentation controls. This issue is fixed in version 4.7.1.

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Description

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.add_media_files() function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23.

Risk Information
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=show-creators-inc' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge