What is the official website of State Street Investment Management ?

The official website of State Street Investment Management is https://www.statestreet.com/im.

What is State Street Investment Management's cybersecurity risk score?

State Street Investment Management has an AI-generated cybersecurity risk score of 766 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has State Street Investment Management experienced?

According to Rankiteo, State Street Investment Management currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has State Street Investment Management been affected by any supply chain cyber incidents ?

According to Rankiteo, State Street Investment Management has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does State Street Investment Management have SOC 2 Type 1 certification ?

According to Rankiteo, State Street Investment Management is not certified under SOC 2 Type 1.

Does State Street Investment Management have SOC 2 Type 2 certification ?

According to Rankiteo, State Street Investment Management does not hold a SOC 2 Type 2 certification.

Does State Street Investment Management comply with GDPR ?

According to Rankiteo, State Street Investment Management is not listed as GDPR compliant.

Does State Street Investment Management have PCI DSS certification ?

According to Rankiteo, State Street Investment Management does not currently maintain PCI DSS compliance.

Does State Street Investment Management comply with HIPAA ?

According to Rankiteo, State Street Investment Management is not compliant with HIPAA regulations.

Does State Street Investment Management have ISO 27001 certification ?

According to Rankiteo,State Street Investment Management is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does State Street Investment Management operate in ?

State Street Investment Management operates primarily in the Financial Services industry.

How many employees does State Street Investment Management have ?

State Street Investment Management employs approximately 2,409 people worldwide.

Does State Street Investment Management own any subsidiaries ?

State Street Investment Management presently has no subsidiaries across any sectors.

How many LinkedIn followers does State Street Investment Management have ?

State Street Investment Management's official LinkedIn profile has approximately 124,038 followers.

What is the NAICS classification code for State Street Investment Management ?

State Street Investment Management is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does State Street Investment Management have a Crunchbase profile ?

No, State Street Investment Management does not have a profile on Crunchbase.

Does State Street Investment Management have a LinkedIn profile ?

Yes, State Street Investment Management maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/state-street-investment-management.

How many cybersecurity incidents has State Street Investment Management experienced ?

As of June 7, 2026, Rankiteo reports that State Street Investment Management has not experienced any cybersecurity incidents.

How many peer or competitor companies does State Street Investment Management have ?

State Street Investment Management has an estimated 31,989 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

SSIM

Boost Score +25 with badge (5 left)

766

/1000

Fair

791

/1000

Fair

State Street Investment Management Vendor Cyber Rating & Cyber Score

statestreet.com

Add Your Compliance Badge

About State Street Investment Management At State Street Investment Management, we have been delivering better outcomes to institutions, financial intermediaries, and investors for nearly half a century. Starting with our early innovations in indexing and ETFs, our rigorous approach continues to be driven by market-tested expertise and a relentless commitment to those we serve. With over $5 trillion in assets managed*, clients in over 60 countries, and a global network of strategic partners, we use our scale to create a comprehensive and cost-effective suite of investment solutions that help investors get wherever they want to go. Website www.statestreet.com/im *This figure is presented as of June 30, 2025 and includes ETF AUM of

SSIM A.I CyberSecurity Scoring

Scoring History

SSIM

State Street Investment Management CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

SSIM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SSIM

Incidents vs Financial Services Industry Avg (This Year)

No incidents recorded for State Street Investment Management in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for State Street Investment Management in 2026.

Incident Types SSIM vs Financial Services Industry Avg (This Year)

No incidents recorded for State Street Investment Management in 2026.

Incident History - SSIM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

State Street Investment Management Subsidiaries

SSIM

Financial Services

Website: https://www.statestreet.com/im

Company Size: 1,001-5,000 employees

State Street SPDR ETFsFinancial Services

Loading…

State Street Investment Management Similar Companies

Old Mutual South Africa

oldmutual.co.za

Old Mutual Limited is a premium pan-African financial services group that offers a broad spectrum of financial solutions to retail and corporate customers across key markets in 14 countries. We have been helping our customers achieve their lifetime financial goals for over 170 years by investing their funds in ways that create positive futures for them, their families, their communities and broader society. In this way, we significantly contribute to improving the lives of our customers and their communities while ensuring a sustainable future for our business. We employ more than 30 000 people and operate in 14 countries across two regions Africa (South Africa, Namibia, Botswana, Zimbabwe, Kenya, Malawi, Tanzania, Nigeria, Ghana, Uganda, Rwanda, South Sudan and eSwatini) as well as Asia (China) So why work here? We believe you can shape the future with us – a future where we build a better Africa together. That’s why we’re committed to creating opportunities that will give you an edge on the rest. Once you’re part of our team, you will have access to the best breed of advice, tools and frameworks that will equip you to be your exceptional best. #MomentsThatMatter

Bloomberg

bloomberg.com

Bloomberg is a global leader in business and financial information, delivering trusted data, news, and insights that bring transparency and efficiency, and fairness to markets. We help connect influential communities across the global financial ecosystem via reliable technology solutions that enable our customers to make more informed decisions and foster better collaboration. We challenge the status quo through constant innovation. We collaborate broadly because we know that other perspectives matter. We put our customers first, as a guiding beacon. And we believe doing the right thing – by our people, our clients, and our communities – is the best thing for our business.

Nomura

nomura.com

Nomura is a financial services group with an integrated global network. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its four business divisions: Wealth Management, Investment Management, Wholesale (Global Markets and Investment Banking), and Banking. Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership.

Danske Bank

danskebank.com

Danske Bank – A driver of growth and development For more than a 150 years, Danske Bank has strived to be a driver of growth and development in society. We have developed in tandem with the societies we are part of, and our advisory services, expertise and financial solutions have helped individuals, families, businesses and organisations to realise their ambitions and potential. With long-term sustainable development as our ambition, we will continue to work every day to be the best possible bank, for the benefit of our customers, employees, shareholders and the societies we are part of. Follow us for relevant content and insights You will receive the latest news, insights and information that can inspire and help you with your everyday financial needs. On our company page, you can also read more about life as an employee at Danske Bank and be sure to check our current job openings if you are interested in joining our international community of 22,000 people and help us build an even more innovative, agile and truly customer-centric culture.

Aditya Birla Capital

adityabirlacapital.com

Aditya Birla Capital Ltd is a financial services company based out of One World Center, Tower 1, 18th Floor, Jupiter Mills Compound, 841, Senapati Bapat Marg, Elphinstone Road, MUMBAI, India. - Aditya Birla Capital is committed to provide equal opportunity to all in employment and prohibits discrimination or harassment in any form on the basis of race, colour, religion, ethnicity, age, gender, disability or any other characteristic protected by law. Diversity, Equity and Inclusion (DEI) is embedded in our recruitment policies based on our business needs and candidates meeting the eligibility criteria such as qualification, skills and experience.

LSEG

lseg.com

LSEG (London Stock Exchange Group) is a diversified international markets infrastructure business —earning our clients’ trust for over 300 years. That legacy of customer-focused excellence ensures that you can rely on our expertise in capital formation, intellectual property and risk and balance sheet management. As global leaders in financial indexing, benchmarking and analytic services, we offer unrivalled access to international capital markets. Our high-performance technology solutions enable companies worldwide to access funds for growth and development. And with our Data & Analytics, Capital Markets and Post Trade divisions, we provide a comprehensive, integrated suite of trusted financial market infrastructure services that help our customers pursue—and achieve—their ambitions. You can count on our open access model for unparalleled partnership, flexibility, stability, and support across all of our businesses. That’s how we make a difference— ensuring people can meet their potential—worldwide.

KPMG US

kpmg.com

KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. With 90+ offices and more than 36,000 employees and partners throughout the US, we’re leading the industry in new and exciting ways. Our size and strength make us much more agile and responsive to changing trends.

Pru Life UK

prulifeuk.com.ph

With 29 years of operations in the Philippines, we have the largest agency force of more than 39,000 licensed financial advisers ready to listen, understand and deliver. We are an innovative force in the life insurance industry who pioneered investment-linked or unit-linked insurance in the Philippines in 2002. Our commitment is to provide accessible and affordable health and wealth protection solutions to Filipinos. We continue to be one of the leading insurers in the country, ranking first in terms of Total Renewal Premium Income from Variable Life Insurance Products and in terms of New Business Annual Premium Equivalent as of Q1 2023, according to the Insurance Commission. For two consecutive years, we have been awarded as the International Life Insurer of the Year for the Philippines. Pru Life UK and Prudential plc are not affiliated with Prudential Financial, Inc., (a company whose principal place of business is in the United States of America), Prudential Assurance Company Limited (a subsidiary of M&G plc, a company incorporated in the United Kingdom), Philippine Prudential Life Insurance Company, Prudentialife Plans, Inc. or Prudential Guarantee and Assurance, Inc. (all Philippine-registered companies). Pru Life UK is a life insurance company and is not engaged in the business of selling pre-need plans. Pru Life UK is headquartered in 9/F Uptown Place Tower 1,1 East 11th Drive, Uptown Bonifacio, Taguig City 1634, Metro Manila, Philippines. Visit www.prulifeuk.com.ph/en/contact-us/ for the PRU Customer Assistance Team’s contact information & complete list of our branches. The PRU Customer Assistance team processes customer concerns based on applicable timelines provided by the law. Pru Life UK is legally permitted to provide financial products or services in the Philippines as regulated by the Insurance Commission. Visit www.insurance.gov.ph/contact-us/ for the Insurance Commission’s complete contact information and list of offices nationwide.

Commonwealth Bank

cb commbank.com.au

Australia’s leading provider of financial services including retail, premium, business and institutional banking, funds management, superannuation, insurance, investment and sharebroking products and services. We are a business with more than 800,000 shareholders and over 52,000 employees. We offer a full range of financial services to help all Australians build and manage their finances. Connect with us, we'd like to hear from you: facebook.com/commonwealthbank twitter.com/commbank youtube.com/commbank youtube.com/commbankbusiness instagram.com/commbank Our Community Guidelines can be found at: https://www.commbank.com.au/support/social-networks.html For information on our Privacy Policy visit https://www.commbank.com.au/support/privacy

Loading…

NEWS

State Street Investment Management CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-7654

SUMMARY

The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of `unserialize()` without an `allowed_classes` restriction in the `IdsToCollection::get_ids_from_string()` function, which processes attacker-controlled post meta values without proper validation. This makes it possible for authenticated attackers with Contributor-level access and above to inject a serialized PHP object into a post's custom meta field and trigger arbitrary code execution by exploiting a bundled POP gadget chain, resulting in remote code execution as the web server user.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-7523

SUMMARY

The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to access arbitrary private alba_card post data, including title, description, assignee, due date, tags, and comments, that is intended to be restricted to Administrators and Editors. The handler is registered via the wp_ajax_nopriv_ hook and its nonce is exposed to all site visitors through wp_localize_script on pages containing the [alba_board] shortcode, making this exploitable by unauthenticated users who can access any such page.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-45409

SUMMARY

Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `"\u0660" * N` or `"\u30fb" * N + "\u6f22"` utilize the `valid_contexto` function prior to length rejection, and for high values of `N` will take a long time to process. This is the same issue as CVE-2024-3651, however the original remediation in 2024 was not a complete fix. A specially crafted argument to the `idna.encode()` function could consume significant resources. This may lead to a denial-of-service. Starting in version 3.14, the function rejects long inputs as soon as practicable prior to any further processing to minimize resource consumption. In version 3.15, this approach was extended to lesser used alternate functions (i.e. per-label conversions and codec support). A workaround is available. Domain names cannot exceed 253 characters in length. If this length limit is enforced prior to passing the domain to the `idna.encode()` function, it should no longer consume significant resources. This is triggered by arbitrarily large inputs that would not occur in normal usage, but may be passed to the library assuming there is no preliminary input validation by the higher-level application.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx

CVE-2026-11431

SUMMARY

A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files (including entire directories returned as archives) to be read from the server filesystem. Because the readable files include service configuration and credential material, exploitation can be used to gather information enabling further compromise. The issue can be combined with CVE-2026-11424 to reach the cloud-side endpoint. On multi-tenant Altium 365 deployments, the readable configuration could have exposed credentials shared across services. Altium Enterprise Server is fixed in 8.1.1; the issue has been remediated in Altium 365 at the service level.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.altium.com/platform/security-compliance/security-advisories

CVE-2026-11429

SUMMARY

A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. The service accepts a sequence of post-clone file-manipulation operations that use user-supplied paths without validation, allowing an authenticated user with basic git access to move arbitrary files outside the intended repository area. This file-move primitive can be used to place attacker-controlled script content into directories where it is later executed by the service, resulting in remote code execution under the Git Service account. On multi-tenant Altium 365 deployments, this could have allowed access to data belonging to other tenants on the same infrastructure node. Altium Enterprise Server is fixed in 8.1.1; the issue has been remediated in Altium 365 at the service level.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: )

cvss4

Base Score: 9.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.altium.com/platform/security-compliance/security-advisories

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…