Company Details
state-of-indiana
14,308
74,098
92
IN.gov
0
STA_1699712
In-progress


State of Indiana Company CyberSecurity Posture
IN.govState government is more than senators, representatives, and elected officials. We build highways, provide drivers licenses, protect our children and vulnerable populations, create jobs, connect Hoosiers to job opportunities, maintain state parks, train law enforcement officers, and we run museums and hospitals. We also provide unemployment insurance, disability, and workers compensation, among countless other services. We're 30,000 strong and still have more work to do. Find out where you fit with us at WorkForIndiana.IN.gov.
Company Details
state-of-indiana
14,308
74,098
92
IN.gov
0
STA_1699712
In-progress
Between 750 and 799

SI Global Score (TPRM)XXXX

Description: The Indiana Office of the Attorney General reported a data breach involving the Indiana Department of Workforce Development on August 16, 2019. The breach, which occurred on August 7, 2019, affected 148 individuals. The data breach compromised personal information, including names, addresses, Social Security numbers, and other sensitive data. This incident highlights the need for robust cybersecurity measures to protect personal information. The breach was reported to the affected individuals, and the department took steps to mitigate the impact and prevent future breaches.


No incidents recorded for State of Indiana in 2026.
No incidents recorded for State of Indiana in 2026.
No incidents recorded for State of Indiana in 2026.
SI cyber incidents detection timeline including parent company and subsidiaries

State government is more than senators, representatives, and elected officials. We build highways, provide drivers licenses, protect our children and vulnerable populations, create jobs, connect Hoosiers to job opportunities, maintain state parks, train law enforcement officers, and we run museums and hospitals. We also provide unemployment insurance, disability, and workers compensation, among countless other services. We're 30,000 strong and still have more work to do. Find out where you fit with us at WorkForIndiana.IN.gov.


The Transportation Security Administration (TSA) is a component agency of the U.S. Department of Homeland Security (DHS), committed to securing the nation’s transportation systems to ensure safe and efficient travel for all. Our mission is to protect the American people by preventing threats and dis

El Consejo Nacional de Investigaciones Científicas y Técnicas (CONICET) es el principal organismo dedicado a la promoción de la ciencia y la tecnología en la Argentina. Su actividad se desarrolla en cuatro grandes áreas: • Ciencias agrarias, ingeniería y de materiales • Ciencias biológicas y de la s

The Commission represents and upholds the interests of the EU as a whole, and is independent of national governments. The European Commission prepares legislation for adoption by the Council (representing the member countries) and the Parliament (representing the citizens). It administers the budge

#MeTeemmeHelsingin Helsingin kaupunki on Suomen suurin työnantaja, jonka palveluksessa on lähes 39 000 ammattilaista ja asiantuntijaa. Helsingin kaupunki tarjoaa henkilöstölle monipuolisia, mielenkiintoisia ja yhteiskunnallisesti merkittäviä työtehtäviä, hyvät mahdollisuudet kehittymiseen, ammatti

The Treasury Department is the executive agency responsible for promoting economic prosperity and ensuring the financial security of the United States. The Department is responsible for a wide range of activities such as advising the President on economic and financial issues, encouraging sustainabl

INSTITUTO DE SEGURIDAD Y SERVICIOS SOCIALES DE LOS TRABAJADORES DEL ESTADO. ES UN ORGANISMOS PÚBLICO QUE OTORGA SERVICIOS DE SALUD, PENSIONES, VIVIENDA, PRÉSTAMOS, ESTANCIAS INFANTILES, TURISMO, CULTURA, RECREACION, DEPORTE; CUYOS AFILIADOS SON TRABAJADORES DE DEPENDENCIAS GUBERNAMENTALES, CON DERE

General Services Administration (GSA) is an independent agency of the United States government established in 1949 to help manage and support the basic functioning of federal agencies. Our organization includes the Public Buildings Service (PBS), Federal Acquisition Service (FAS), and a variety of S
Welcome! We're the National Oceanic & Atmospheric Administration or NOAA. From daily weather forecasts, severe storm warnings and climate monitoring to fisheries management, coastal restoration and supporting marine commerce, our products and services support economic vitality and affect more than

Ontario Government | Gouvernement de l’Ontario The Ontario Government works to serve the public interest and uphold the public trust by providing Ministers with objective advice and expert guidance. The Ontario Public Service carries out the decisions and policies of the elected government with int
.png)
IAPP News Editor Joe Duball rounds up the new U.S. state privacy laws and rules that came into force 1 Jan. and the potential impacts they...
INDIANA — New research analyzing 2024 FBI data reveals that Indiana is the state second most at risk of cybercrime, reporting a rate of...
SOUTH BEND, Ind. (WNDU) - The Indiana Toll Road offered a tutorial in cybersecurity awareness at Indiana University South Bend on Tuesday...
All of us, we're using smartphones, all of us, we're using digital technology, and we are, we can be vulnerable at any time.
In 2019, the US data privacy framework changed significantly with the emergence of the California Consumer Privacy Act which created a...
ELKHART, Ind., October 1, 2025 (Newswire.com) - ITR Concession Company LLC (ITRCC), the concessionaire and operator of the Indiana Toll Road...
WEST LAFAYETTE, Ind. — Purdue University remains the highest-ranked public university in Indiana and, for the third straight year,...
def con A DEF CON hacker walks into a small-town water facility…no, this is not the setup for a joke or a (super-geeky) odd-couple rom-com.
Starting with 2025 State Rankings, Annual Rankings Report identifies top locations, rising stars for corporate relocations and expansions.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of State of Indiana is http://www.WorkForIndiana.IN.gov.
According to Rankiteo, State of Indiana’s AI-generated cybersecurity score is 780, reflecting their Fair security posture.
According to Rankiteo, State of Indiana currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, State of Indiana has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
According to Rankiteo, State of Indiana is not certified under SOC 2 Type 1.
According to Rankiteo, State of Indiana does not hold a SOC 2 Type 2 certification.
According to Rankiteo, State of Indiana is not listed as GDPR compliant.
According to Rankiteo, State of Indiana does not currently maintain PCI DSS compliance.
According to Rankiteo, State of Indiana is not compliant with HIPAA regulations.
According to Rankiteo,State of Indiana is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
State of Indiana operates primarily in the Government Administration industry.
State of Indiana employs approximately 14,308 people worldwide.
State of Indiana presently has no subsidiaries across any sectors.
State of Indiana’s official LinkedIn profile has approximately 74,098 followers.
State of Indiana is classified under the NAICS code 92, which corresponds to Public Administration.
No, State of Indiana does not have a profile on Crunchbase.
Yes, State of Indiana maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/state-of-indiana.
As of January 21, 2026, Rankiteo reports that State of Indiana has experienced 1 cybersecurity incidents.
State of Indiana has an estimated 11,869 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Title: Indiana Department of Workforce Development Data Breach
Description: The Indiana Office of the Attorney General reported a data breach involving the Indiana Department of Workforce Development on August 16, 2019, affecting 148 individuals. The breach occurred on August 7, 2019.
Date Detected: 2019-08-07
Date Publicly Disclosed: 2019-08-16
Type: data breach
Common Attack Types: The most common types of attacks the company has faced is Breach.

Entity Name: Indiana Department of Workforce Development
Entity Type: Government
Industry: Public Administration
Location: Indiana
Customers Affected: 148

Number of Records Exposed: 148
Most Recent Incident Detected: The most recent incident detected was on 2019-08-07.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2019-08-16.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 148.0.
.png)
SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler. Root causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g., execSync(`git show -s --format=%B ${commitHash}`)). Shell metacharacters are interpreted by the shell, enabling command execution. ImpactThis vulnerability is generally hard to exploit, as it requires --commit-hash to be attacker controlled. The vulnerability primarily affects CI/CD environments where `wrangler pages deploy` is used in automated pipelines and the --commit-hash parameter is populated from external, potentially untrusted sources. An attacker could exploit this to: * Run any shell command. * Exfiltrate environment variables. * Compromise the CI runner to install backdoors or modify build artifacts. Credits Disclosed responsibly by kny4hacker. Mitigation * Wrangler v4 users are requested to upgrade to Wrangler v4.59.1 or higher. * Wrangler v3 users are requested to upgrade to Wrangler v3.114.17 or higher. * Users on Wrangler v2 (EOL) should upgrade to a supported major version.
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.