What is the official website of StarHub ?

The official website of StarHub is https://www.starhub.com.

What is StarHub's cybersecurity risk score?

StarHub has an AI-generated cybersecurity risk score of 712 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has StarHub experienced?

According to Rankiteo, StarHub currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has StarHub been affected by any supply chain cyber incidents ?

According to Rankiteo, StarHub has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does StarHub have SOC 2 Type 1 certification ?

According to Rankiteo, StarHub is not certified under SOC 2 Type 1.

Does StarHub have SOC 2 Type 2 certification ?

According to Rankiteo, StarHub does not hold a SOC 2 Type 2 certification.

Does StarHub comply with GDPR ?

According to Rankiteo, StarHub is not listed as GDPR compliant.

Does StarHub have PCI DSS certification ?

According to Rankiteo, StarHub does not currently maintain PCI DSS compliance.

Does StarHub comply with HIPAA ?

According to Rankiteo, StarHub is not compliant with HIPAA regulations.

Does StarHub have ISO 27001 certification ?

According to Rankiteo,StarHub is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does StarHub operate in ?

StarHub operates primarily in the Telecommunications industry.

How many employees does StarHub have ?

StarHub employs approximately 2,772 people worldwide.

Does StarHub own any subsidiaries ?

StarHub presently has no subsidiaries across any sectors.

How many LinkedIn followers does StarHub have ?

StarHub's official LinkedIn profile has approximately 69,782 followers.

What is the NAICS classification code for StarHub ?

StarHub is classified under the NAICS code 517, which corresponds to Telecommunications.

Does StarHub have a Crunchbase profile ?

Yes, StarHub has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/starhub.

Does StarHub have a LinkedIn profile ?

Yes, StarHub maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/starhub.

How many cybersecurity incidents has StarHub experienced ?

As of August 29, 2026, Rankiteo reports that StarHub has experienced 3 cybersecurity incidents.

How many peer or competitor companies does StarHub have ?

StarHub has an estimated 10,311 peer or competitor companies worldwide.

What types of cybersecurity incidents has StarHub faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

StarHub

Boost Score +25 with badge (5 left)

712

/1000

Moderate

737

/1000

Moderate

StarHub Vendor Cyber Rating & Cyber Score

starhub.com

cb in

Add Your Compliance Badge

StarHub is a leading homegrown Singapore company that delivers world-class communications, entertainment, and digital services. With our extensive fibre and wireless infrastructure and global partnerships, we bring to people, homes and enterprises quality mobile and fixed services, a broad suite of premium content, and a diverse range of communication solutions. We develop and deliver solutions incorporating artificial intelligence, cybersecurity, data analytics, Internet of Things, and robotics for corporate and government clients. StarHub is committed to conducting our business sustainably and responsibly. StarHub is named among TIME’s World’s Most Sustainable Companies 2025 and ranked as the world’s most sustainable wireless

StarHub A.I CyberSecurity Scoring

Scoring History

StarHub

StarHub CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

StarHub

Cyber Attack

2/2026

TPGM1-SINSTA177...

StarHub

Cyber Attack

100

2/2026

SIMSTASINM1-177...

StarHub

Cyber Attack

7/2025

M1-SINSTA177061...

Loading…

A.I.

StarHub Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for StarHub

Incidents vs Telecommunications Industry Avg (This Year)

StarHub has 2.04% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

StarHub has 94.17% more incidents than the average of all companies with at least one recorded incident.

Incident Types StarHub vs Telecommunications Industry Avg (This Year)

StarHub reported 2 incidents this year: 2 cyber attacks, 0 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - StarHub (X = Date, Y = Severity)

Loading…

SUBSIDIARY

StarHub Subsidiaries

Parent Company

StarHub

Telecommunications

Website: https://www.starhub.com

Company Size: 1,001-5,000 employees

No subsidiary data available for this company.

Loading…

StarHub Similar Companies

Telkom Indonesia

telkom.co.id

PT Telkom Indonesia (Persero) Tbk (Telkom) is a state-owned information and communications technology enterprise and telecommunications network in Indonesia. The Government of Indonesia is the majority shareholder with 52.09 percent shares while the remaining 47.91 percent shares belong to public shareholders. Telkom’s shares are traded on the Indonesian Stock Exchange (IDX) where it is listed as “TLKM” and on the New York Stock Exchange (NYSE), which lists it as “TLK”. As it transforms to become a digital telecommunication company, TelkomGroup implements a customer-oriented business and company operational strategy. The transformation aims to trim down TelkomGroup’s organization to be leaner and more agile in adapting the fast-changing nature of telecommunications industry. The new organization is expected to be able to improve efficiency and be more effective in producing a quality customer experience. TelkomGroup’s activities grow and change in accordance to the development of new technology, information and digitalization, but still within the corridor of telecommunications and information technology. This is evident in the newly developed business lines, which complements the company’s existing legacy business.

Idea Cellular Ltd

cb ideacellular.com

Idea Cellular is an Aditya Birla Group Company, India's first truly multinational corporation. Idea is a pan-India integrated GSM operator offering 2G and 3G services, and has its own NLD and ILD operations, and ISP license. With revenue in excess of $4 billion; revenue market share of 18%; and subscriber base of over 150 million, Idea is India’s 3rd largest mobile operator. Idea ranks among the Top 10 country operators in the world with a traffic of over 1.5 billion minutes a day. Idea’s robust pan-India coverage is built on a network of over 100,000 2G and 3G cell sites, spread across over 55,000 towns in India. Using the latest in technology, Idea provides world-class service delivery through the most extensive network of customer touch points, comprising of nearly 4,500 exclusive Idea outlets, and over 7,000 call centre seats. Idea’s customer service delivery platform is ISO 9001:2008 certified, making it the only operator in the country to have this standard certification for all 22 service areas and the corporate office Idea won the ‘Best Brand Campaign’ at the esteemed World Communication Awards 2011. It also recently won 3 Awards at the ET Telecom Awards 2012, in the following categories Customer Experience Enhancement, Excellence in Marketing and Innovative products, respectively.

EchoStar Corporation

cb echostar.com

EchoStar Corporation (Nasdaq: SATS) is a premier provider of technology, networking services, television entertainment and connectivity, offering consumer, enterprise, operator and government solutions worldwide under its EchoStar®, Boost Mobile®, Sling TV, DISH TV, Hughes®, HughesNet®, HughesON™ and JUPITER™ brands. Tune into the innovation, collaboration and culture that our team members bring to the office every day. We want you to be a part of our journey to build the next generation of technology that transforms the way the world communicates. Our team members are the key to our history of groundbreaking innovation and our continued progress. If you bring an inquisitive curiosity, a sense of pride in your work, an openness to adventure and a drive to win, we’ll provide the structure to take the next step in your career. This is more than just another job, this is your launchpad to achieve your potential and a community dedicated to your growth.

PTCL.Official

ptcl.com.pk

𝗩𝗶𝘀𝗶𝗼𝗻: To be the leading and most admired Telecom and ICT provider in and for Pakistan. 𝐌𝐢𝐬𝐬𝐢𝐨𝐧: To be the partner of choice for our customers, to develop our people and to deliver value to our shareholders. 𝗖𝗼𝗿𝗽𝗼𝗿𝗮𝘁𝗲 𝗩𝗮𝗹𝘂𝗲𝘀: Be resilient Think Big Win Every Battle Value Success PTCL is going to be your first choice in the future as well, just as it has been over the past seven decades.

Ciena

cb ciena.com

Ciena (NYSE:CIEN) is the global leader in high-speed connectivity. We build advanced networks to support exponential growth in bandwidth demand—empowering our customers, partners, and communities to thrive in the AI era. With unparalleled expertise and innovation, our networking systems, interconnects, automation software, and services revolutionize data transmission and network management.

EE

ee.co.uk

EE, part of BT Group, is the largest and most advanced mobile communications company in the UK, delivering mobile and fixed communications services to consumers. We run the UK's biggest and fastest mobile network, having pioneered the UK's first superfast 4G mobile service in October 2012 and was the first European operator to surpass 14 million 4G customers in December 2015. We have more than 550 shops across the UK and we’re dedicated to making EE an outstanding place to work for our 13,000 employees. Our 4G coverage reaches 80% of the UK geography and we have plans to extend 4G geographic coverage to 95% by 2020. We’ve received extensive independent recognition, including being ranked the UK's best overall network by RootMetrics®; Best Network at the 2015, 2016 and 2017 Mobile News Awards; Best Network at the Mobile Choice Consumer Awards 2016; Best Consumer Network at the 2015 & 2016 Mobile Industry Awards; as well as Fastest Network and Best Network Coverage at the 2017 uSwitch Mobile Awards.

vivo

vivo.com

vivo is a technology company that creates great products based on a design-driven value, with smart devices and intelligent services as its core. The company aims to build a bridge between humans and the digital world. Through unique creativity, vivo provides users with an increasingly convenient mobile and digital life. vivo has over 18,000 employees across the globe. While bringing together and developing the best local talents to deliver excellence, vivo is supported by a network of 10 R&D centers in Shenzhen, Dongguan, Nanjing, Beijing, Hangzhou, Shanghai, Xi'an, Taipei, Tokyo and San Diego, focusing on the development of state-of-the-art consumer technologies, including 5G, artificial intelligence, industrial design, imaging system and other up-and-coming technologies. vivo has also set up 7 production bases (including brand-authorized manufacturing centers), across China, South- and Southeast Asia, and more regions, with an annual production capacity of nearly 200 million smartphones. As of now, vivo has branched out its sales network across more than 60 countries and regions, and is winning more than 400 million users worldwide with its superior products and services. Following the company's core values, which include Benfen, design-driven value, user-orientation, continuous learning and team spirit. vivo has implemented a sustainable development strategy, with the vision of developing into a healthier, more sustainable world-class corporation. Official Site: www.vivo.com/en Facebook: @vivoGlobal Instagram: @vivo_global

KPN

kpn.com

Welkom bij de LinkedIn pagina van KPN. Sinds jaar en dag maakt KPN technologie toegankelijk. Hier leest u alles over de ontwikkelingen rondom de thema’s die KPN belangrijk vindt, zoals Het Nieuwe Leven & Werken, Veiligheid & Privacy en ICT-infrastructuur. Ook een transparante en betrouwbare dienstverlener zijn, efficiency in de zorg en duurzaam ondernemen staan bij ons hoog in het vaandel. Op onze pagina blijft u op de hoogte van het laatste nieuws rondom onze activiteiten, de thema’s in uw leven waarin technologie een rol speelt en onze producten en services op het gebied van ICT. Ontdek samen met ons voor u en uw organisatie de beste oplossingen.

Proximus Group

proximus.com

Proximus Group is a provider of future-proof connectivity, IT and digital services, headquartered in Brussels. The Group is actively engaged in building a connected world that people trust, so society blooms. The Domestic segment is focused on providing state-of-the art telecommunications and IT services in the Benelux. In Belgium, core products and services are offered under the Proximus, Mobile Vikings and Scarlet brands for the residential market and Proximus NXT for the Enterprise market. The Group is also active in the Netherlands and in Luxembourg (Tango and Proximus NXT). Proximus Global overarches the international activities of the Group, gathering the strengths of BICS, Telesign and Route Mobile. Encompassing the entire value chain from P2P Voice & Messaging and Mobility services to CPaaS and Digital Identity, Proximus Global is in a unique position to become a global digital communications leader. The Group has the ambition to build the #1 gigabit network for Belgium and plays a central role in creating inspiring digital ecosystems, while fostering an engaging culture and empowering ways of working. Building upon these strengths, Proximus aims to contribute to an inclusive and sustainable digital society, delight customers with an unrivalled experience and achieve profitable growth both locally and internationally to deliver long-term value for stakeholders. With 13,131 employees, imbued with Proximus' Think Possible mindset and all engaged to offer a superior customer experience, the Group realized an underlying Group revenue of EUR 6,430 million end-2024.

Loading…

NEWS

StarHub CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 08, 2026 03:54 AM

5 Things To Know About StarHub (SGX: CC3) – Developing A Profitable And Sustainable Market Share Amidst A Structural Reset

StarHub is prioritising resilience and long-term value creation, targeting $70 million in run-rate savings between FY2026 and FY2028.

Read Article

March 06, 2026 08:00 AM

StarHub focuses on structural reset

StarHub is a homegrown Singapore company that offers quality mobile and fixed services, a broad suite of premium content, and a diverse...

Read Article

February 12, 2026 08:00 AM

StarHub Continuing to Battle Heavy Mobile Market Competition

Stronger competition in the mobile market, secular decline in the linear pay-TV market, and the move to the National Broadband Network have...

Read Article

February 09, 2026 08:00 AM

What is UNC3886, the group that attacked Singapore’s telco infrastructure?

Learn about UNC3886, a state-linked cyberespionage group that targeted Singapore's major telecommunications infrastructure.

Read Article

February 09, 2026 08:00 AM

Singapore says cyber espionage group targeted telco infrastructure

Singapore's four telecom companies, Singtel, StarHub, M1 and Simba Telecom, were targeted by cyber espionage group UNC3886 in attacks last...

Read Article

February 09, 2026 08:00 AM

UNC3886 Cyber Espionage Targets Singapore Telecoms

Singapore's Cyber Security Agency confirms that the cyberespionage group UNC3886 targeted major telecom infrastructure in 2025 cyberattacks.

Read Article

January 26, 2026 08:00 AM

Ultra-low telco prices may hurt service quality and security, says StarHub CEO

StarHub CEO Nikhil Eapen believes Simba's M1 acquisition could stabilise Singapore's telco market, shifting focus from low prices to better...

Read Article

December 01, 2025 08:00 AM

StarHub, NeutraDC push quantum-safe links to bolster Southeast Asia’s data flows

A new StarHub PoP at NeutraDC SNG-3 will deliver sub-millisecond connectivity and quantum-resistant protection for enterprises expanding AI...

Read Article

September 05, 2025 07:00 AM

StarHub and Vectra AI Launch AI-Powered Threat Detection for Enterprises in Singapore

Partnership delivers cybersecurity AI platform to safeguard modern networks from modern attacks. Singapore, 5 September 2025 – StarHub...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55867

SUMMARY

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.revokeToken() in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERS_TOKENREMOVE permission against the attacker-controlled userId path parameter before resolving the token selected by idOrToken. An authenticated user can provide an authorized userId while accessTokenService.loadById() or accessTokenService.load() resolves a token belonging to another user, including a service account or administrator, after which accessTokenService.destroy() deletes that token without checking AccessToken.getUserName(). The issue does not expose token contents, but unauthorized deletion causes integrity impact and can disrupt access-token-based integrations. This issue is fixed in versions 6.3.12, 7.0.7, and 7.1.2.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55860

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a secure connection. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest naming mysql_clear_password or dialog (PAM) over a plain-TCP unencrypted connection, and AuthenticationFlow permits ClearPasswordPluginFlow or PamPluginFlow to return the user's password as cleartext bytes on the wire. The disclosed credentials can subsequently be used to authenticate directly to the database server. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55859

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to character_set_client through the OK-packet session-state-tracking mechanism, including through SET NAMES executed by a stored routine or trigger, server configuration, or a hostile or man-in-the-middle server. If the new character set is not UTF-8, the driver continues to exchange UTF-8 while the server interprets the same bytes under a different encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value raises R2dbcNonTransientResourceException with SQLState 08000 and closes the connection. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55858

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55857

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysql_clear_password plugin is gated behind a secure transport, but the sibling PAM handler SendPamAuthPacketFactory, named dialog by the server, does not declare that requirement and inherits the default secure-required value false; older branches implement the same affected behavior in SendPamAuthPacket. A hostile or man-in-the-middle server can send an Authentication Switch Request for dialog over plain TCP, causing the driver to return the user's password in cleartext when sslMode=DISABLE and restrictedAuth=null, which is the default configuration. Properly verified TLS and local Unix sockets are not exposed to this transport vector. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…