SPHI
Company Details
Linkedin ID:
smphi
Website:
Employees number:
10,001
Number of followers:
114,771
NAICS:
None
Industry Type:
Homepage:
https://smprime.com
IP Addresses:
0
Company ID:
SM _1261185
Scan Status:
In-progress
SM Prime Holdings, Inc. Company CyberSecurity Posture
https://smprime.com
SM Prime Holdings, Inc. (SMPH) is one of the largest integrated property developers in Southeast Asia that offers innovative and sustainable lifestyle cities with the development of malls, residences, offices, hotels and convention centers. It is also the largest, in terms of asset, in the Philippines. SM Prime Holdings, Inc. was incorporated in the Philippines in 1994. They started as a mall developer and operator and grew to be the biggest retail shopping center developer and operator in the Philippines. Currently, it has 72 malls in and outside Metro Manila and 7 shopping malls in China, totaling 9.5 million square meters of Gross Floor Area (GFA). In the Philippines, they have a total of 18,153 tenants and 1,940 tenants in China. SM Prime goes beyond mall development and management through its units and subsidiaries. SM Development Corporation (SMDC) is the residential business component that sells affordable condominium units. SM Prime’s commercial business units, the Commercial Property Group (CPG) is engaged in the development and leasing of office buildings in Metro Manila, as well as the operations and management of buildings and other land holdings such as Mall of Asia Arena (MOA Arena). Its Hotels and Convention Centers business unit develops and manages various hotel and convention centers across the country.
SM Prime Holdings, Inc. A.I CyberSecurity Scoring
SPHI Risk Score (AI oriented)Between 750 and 799
SPHI
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
SPHI Global Score (TPRM)XXXX
SPHI
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
SPHI Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
SPHI Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for SPHI
Incidents vs Real Estate Industry Average (This Year)
No incidents recorded for SM Prime Holdings, Inc. in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for SM Prime Holdings, Inc. in 2025.
Incident Types SPHI vs Real Estate Industry Avg (This Year)
No incidents recorded for SM Prime Holdings, Inc. in 2025.
Incident History — SPHI (X = Date, Y = Severity)
SPHI cyber incidents detection timeline including parent company and subsidiaries
SPHI Company Subsidiaries
SM Prime Holdings, Inc. (SMPH) is one of the largest integrated property developers in Southeast Asia that offers innovative and sustainable lifestyle cities with the development of malls, residences, offices, hotels and convention centers. It is also the largest, in terms of asset, in the Philippines. SM Prime Holdings, Inc. was incorporated in the Philippines in 1994. They started as a mall developer and operator and grew to be the biggest retail shopping center developer and operator in the Philippines. Currently, it has 72 malls in and outside Metro Manila and 7 shopping malls in China, totaling 9.5 million square meters of Gross Floor Area (GFA). In the Philippines, they have a total of 18,153 tenants and 1,940 tenants in China. SM Prime goes beyond mall development and management through its units and subsidiaries. SM Development Corporation (SMDC) is the residential business component that sells affordable condominium units. SM Prime’s commercial business units, the Commercial Property Group (CPG) is engaged in the development and leasing of office buildings in Metro Manila, as well as the operations and management of buildings and other land holdings such as Mall of Asia Arena (MOA Arena). Its Hotels and Convention Centers business unit develops and manages various hotel and convention centers across the country.
Loading...
SPHI Similar Companies
Country Garden Group
Forbes 500 500 Projects Globally Top 10 Real Estate Company in China Over the past 20 years, Country Garden has been a practitioner in China's urbanization, bringing modernization to landscape and improving the quality of people's lives. Besides Mainland China, Country Garden has also been act
Lopes Consultoria de Imóveis
A GARANTIA DE SER LOPES A Lopes é a maior empresa de soluções integradas de intermediação, consultoria e promoção de financiamentos de imóveis do Brasil. Está presente em 10 estados - São Paulo, Rio de Janeiro, Minas Gerais, Espírito Santo, Rio Grande do Sul, Paraná, Santa Catarina, Bahia, Per
Berkshire Hathaway HomeServices
Berkshire Hathaway HomeServices is a global residential real estate network with more than 50,000 real estate professionals and nearly 1,600 offices across 4 continents and 13 countries and territories including the U.S., Canada, Mexico, Europe, the Middle East, The Caribbean and India. In 2022, th
Welcome to Coldwell Banker Real Estate LLC, a company founded in 1906 on a commitment to professionalism and customer service which remains the cornerstone of our business philosophy today. We are the nation’s oldest real estate company and our experience has helped make the dream of homeownership a
Empire Company Limited
Empire Company Limited (TSX: EMP.A) is a Canadian company headquartered in Stellarton, Nova Scotia. Empire’s key businesses are food retailing, through wholly-owned subsidiary Sobeys Inc., and related real estate. With approximately $30.5 billion in annual sales and $16.5 billion in assets, Empire C
Colliers (NASDAQ, TSX: CIGI) is a leading diversified professional services and investment management company. With operations in 68 countries, our 19,000 enterprising professionals work collaboratively to provide expert real estate and investment advice to clients. For more than 29 years, our exper
Weichert, Realtors
Since 1969, Weichert Realtors has grown from a single office into one of the nation's leading providers of real estate and related services. Their success is rooted in their customer-first philosophy, making every organizational decision based on building trust and sustaining amazing experiences at
As one of the leading global real estate franchisors, RE/MAX, LLC is a subsidiary of RE/MAX Holdings (NYSE: RMAX) with more than 140,000 agents in almost 9,000 offices and a presence in more than 110 countries and territories. Nobody in the world sells more real estate than RE/MAX, as measured by
Founded in 1993, Greystar provides world-class service in the residential rental housing industry. Our innovative vertically integrated business model integrates the management, development and investment disciplines of the rental housing industry on international, regional and local levels. This un
.png)
SPHI CyberSecurity News
November 25, 2025 04:04 PM
SM Prime reports 70% unit take-up at Hamilo Coast
COSTA DEL HAMILO, Inc. (CDHI), a subsidiary of listed SM Prime Holdings, Inc., has sold around 70% of units in its Hamilo Coast development...
September 19, 2025 07:00 AM
SM Prime shapes communities from Bay Area to Batangas and Tarlac
SM Prime Holdings, Inc. (SM Prime), one of Southeast Asia's leading integrated property developers, continues to expand its influence across...
September 18, 2025 07:00 AM
SM Supermalls, PNP Anti-Cybercrime Group join forces to promote public awareness on cybersecurity
SM Supermalls and the Philippine National Police Anti-Cybercrime Group have formalized their partnership.
June 29, 2025 03:20 AM
SM Prime bags top ESG honors at 15th Asian Excellence Awards
SM Prime Holdings Inc. emerged as a big winner at the 15th Asian Excellence Awards held on June 27 in Hong Kong, earning six major accolades for its...
June 27, 2025 07:00 AM
SM Prime prepares for a resilient future
The effects of the 7.7 magnitude earthquakes in Myanmar and the aftershocks in Thailand continue to be seen months after the events.
June 11, 2025 07:00 AM
SM Hotels targets to finish 7 projects by 2029
SM HOTELS and Convention Corp. (SMHCC), the hospitality arm of listed real estate developer SM Prime Holdings, Inc., is expanding its...
February 11, 2025 08:00 AM
SM Prime returns to bond market with P25-B fresh offer
Real estate giant SM Prime Holdings Inc. is all set to return to the debt market this month after pricing its P25-billion bond offer...
February 11, 2025 08:00 AM
SM Prime P25B bond sale begins Feb 12; foreign investors welcome
SM Prime Holdings Inc. is finally opening its bond sale to investors this week through a number of select issue managers, bookrunners and...
December 20, 2024 08:00 AM
SM Prime to raise P7B
SM Prime Holdings Inc. said it will seek to raise P7 billion through a bond sale. The new fund raising represents the second tranche of the...
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
SPHI CyberSecurity History Information
Official Website of SM Prime Holdings, Inc.
The official website of SM Prime Holdings, Inc. is https://smprime.com.
SM Prime Holdings, Inc.’s AI-Generated Cybersecurity Score
According to Rankiteo, SM Prime Holdings, Inc.’s AI-generated cybersecurity score is 781, reflecting their Fair security posture.
How many security badges does SM Prime Holdings, Inc.’ have ?
According to Rankiteo, SM Prime Holdings, Inc. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does SM Prime Holdings, Inc. have SOC 2 Type 1 certification ?
According to Rankiteo, SM Prime Holdings, Inc. is not certified under SOC 2 Type 1.
Does SM Prime Holdings, Inc. have SOC 2 Type 2 certification ?
According to Rankiteo, SM Prime Holdings, Inc. does not hold a SOC 2 Type 2 certification.
Does SM Prime Holdings, Inc. comply with GDPR ?
According to Rankiteo, SM Prime Holdings, Inc. is not listed as GDPR compliant.
Does SM Prime Holdings, Inc. have PCI DSS certification ?
According to Rankiteo, SM Prime Holdings, Inc. does not currently maintain PCI DSS compliance.
Does SM Prime Holdings, Inc. comply with HIPAA ?
According to Rankiteo, SM Prime Holdings, Inc. is not compliant with HIPAA regulations.
Does SM Prime Holdings, Inc. have ISO 27001 certification ?
According to Rankiteo,SM Prime Holdings, Inc. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of SM Prime Holdings, Inc.
SM Prime Holdings, Inc. operates primarily in the Real Estate industry.
Number of Employees at SM Prime Holdings, Inc.
SM Prime Holdings, Inc. employs approximately 10,001 people worldwide.
Subsidiaries Owned by SM Prime Holdings, Inc.
SM Prime Holdings, Inc. presently has no subsidiaries across any sectors.
SM Prime Holdings, Inc.’s LinkedIn Followers
SM Prime Holdings, Inc.’s official LinkedIn profile has approximately 114,771 followers.
NAICS Classification of SM Prime Holdings, Inc.
SM Prime Holdings, Inc. is classified under the NAICS code None, which corresponds to Others.
SM Prime Holdings, Inc.’s Presence on Crunchbase
No, SM Prime Holdings, Inc. does not have a profile on Crunchbase.
SM Prime Holdings, Inc.’s Presence on LinkedIn
Yes, SM Prime Holdings, Inc. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/smphi.
Cybersecurity Incidents Involving SM Prime Holdings, Inc.
As of December 05, 2025, Rankiteo reports that SM Prime Holdings, Inc. has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
SM Prime Holdings, Inc. has an estimated 29,360 peer or competitor companies worldwide.
SM Prime Holdings, Inc. CyberSecurity History Information
How many cyber incidents has SM Prime Holdings, Inc. faced ?
Total Incidents: According to Rankiteo, SM Prime Holdings, Inc. has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at SM Prime Holdings, Inc. ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similarly, function api.getContentType splits the Content-Type header (which is also untrusted data) on an application string. As a result, in the face of a malicious request with either an excessively long OID in the payload containing many period characters or a malformed Content-Type header, a call to api.ParseJSONRequest or api.getContentType incurs allocations of O(n) bytes (where n stands for the length of the function's argument). This vulnerability is fixed in 2.0.3.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source are user input, and they're inserted straight into the DOM. If they contain HTML tags, they will be rendered (after some escaping using quotes and textarea tags).
Risk Information
cvss4
Base: 7.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
SysReptor is a fully customizable pentest reporting platform. Prior to 2025.102, there is a Stored Cross-Site Scripting (XSS) vulnerability allows authenticated users to execute malicious JavaScript in the context of other logged-in users by uploading malicious JavaScript files in the web UI. This vulnerability is fixed in 2025.102.
Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Description
Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its fundamental properties. In 2.3.1 and earlier, TaikoInbox._verifyBatches (packages/protocol/contracts/layer1/based/TaikoInbox.sol:627-678) advanced the local tid to whatever transition matched the current blockHash before knowing whether that batch would actually be verified. When the loop later broke (e.g., cooldown window not yet passed or transition invalidated), the function still wrote that newer tid into batches[lastVerifiedBatchId].verifiedTransitionId after decrementing batchId. Result: the last verified batch could end up pointing at a transition index from the next batch (often zeroed), corrupting the verified chain pointer.
Risk Information
cvss4
Base: 8.0
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=smphi' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
