What is the official website of Thompson Coburn LLP ?

The official website of Thompson Coburn LLP is http://www.thompsoncoburn.com.

What is Thompson Coburn LLP's cybersecurity risk score?

Thompson Coburn LLP has an AI-generated cybersecurity risk score of 646 out of 1000, indicating a Poor security posture according to Rankiteo's assessment.

How many security incidents has Thompson Coburn LLP experienced?

According to Rankiteo, Thompson Coburn LLP currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Thompson Coburn LLP been affected by any supply chain cyber incidents ?

According to Rankiteo, Thompson Coburn LLP has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Thompson Coburn LLP have SOC 2 Type 1 certification ?

According to Rankiteo, Thompson Coburn LLP is not certified under SOC 2 Type 1.

Does Thompson Coburn LLP have SOC 2 Type 2 certification ?

According to Rankiteo, Thompson Coburn LLP does not hold a SOC 2 Type 2 certification.

Does Thompson Coburn LLP comply with GDPR ?

According to Rankiteo, Thompson Coburn LLP is not listed as GDPR compliant.

Does Thompson Coburn LLP have PCI DSS certification ?

According to Rankiteo, Thompson Coburn LLP does not currently maintain PCI DSS compliance.

Does Thompson Coburn LLP comply with HIPAA ?

According to Rankiteo, Thompson Coburn LLP is not compliant with HIPAA regulations.

Does Thompson Coburn LLP have ISO 27001 certification ?

According to Rankiteo,Thompson Coburn LLP is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Thompson Coburn LLP operate in ?

Thompson Coburn LLP operates primarily in the Law Practice industry.

How many employees does Thompson Coburn LLP have ?

Thompson Coburn LLP employs approximately 1,011 people worldwide.

Does Thompson Coburn LLP own any subsidiaries ?

Thompson Coburn LLP presently has no subsidiaries across any sectors.

How many LinkedIn followers does Thompson Coburn LLP have ?

Thompson Coburn LLP's official LinkedIn profile has approximately 11,760 followers.

What is the NAICS classification code for Thompson Coburn LLP ?

Thompson Coburn LLP is classified under the NAICS code 54111, which corresponds to Offices of Lawyers.

Does Thompson Coburn LLP have a Crunchbase profile ?

No, Thompson Coburn LLP does not have a profile on Crunchbase.

Does Thompson Coburn LLP have a LinkedIn profile ?

Yes, Thompson Coburn LLP maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/thompson-coburn-llp.

How many cybersecurity incidents has Thompson Coburn LLP experienced ?

As of July 31, 2026, Rankiteo reports that Thompson Coburn LLP has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Thompson Coburn LLP have ?

Thompson Coburn LLP has an estimated 16,201 peer or competitor companies worldwide.

What types of cybersecurity incidents has Thompson Coburn LLP faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

TCL

Boost Score +25 with badge (5 left)

646

/1000

Poor

671

/1000

Weak

Thompson Coburn LLP Vendor Cyber Rating & Cyber Score

thompsoncoburn.com

Add Your Compliance Badge

Thompson Coburn is a full-service, values-driven law firm with offices strategically located in Birmingham, Chicago, Dallas, Los Angeles, New York, Southern Illinois, St. Louis, and Washington, D.C. The firm represents a sophisticated client base — including Fortune 500, middle-market and emerging companies — across a range of practice areas and industry sectors. From transportation and health care to agtech and higher education, our practitioners have deep industry knowledge that informs the services we provide to clients across the globe from our national network of offices.

TCL A.I CyberSecurity Scoring

Scoring History

TCL

Thompson Coburn LLP CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Thompson Coburn LLP

Breach

5/2024

THO224072725

Thompson Coburn LLP

Breach

5/2024

PRETHO177085094...

Loading…

A.I.

TCL Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for TCL

Incidents vs Law Practice Industry Avg (This Year)

No incidents recorded for Thompson Coburn LLP in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Thompson Coburn LLP in 2026.

Incident Types TCL vs Law Practice Industry Avg (This Year)

No incidents recorded for Thompson Coburn LLP in 2026.

Incident History - TCL (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Thompson Coburn LLP Subsidiaries

Parent Company

TCL

Law Practice

Website: http://www.thompsoncoburn.com

Company Size: 501-1,000 employees

No subsidiary data available for this company.

Loading…

Thompson Coburn LLP Similar Companies

DLA Piper

dlapiper.com

DLA Piper is a global law firm helping our clients achieve their goals wherever they do business. Our pursuit of innovation has transformed our delivery of legal services. With offices in the Americas, Europe, the Middle East, Africa and Asia Pacific, we deliver exceptional outcomes on cross-border projects, critical transactions and high-stakes disputes. Every day we help trailblazing organizations seize business opportunities and successfully manage growth and change at speed. Through our pro bono work and community investment around the world, we help create a more just and sustainable future. Visit dlapiper.com to discover more.

Loading…

NEWS

Thompson Coburn LLP CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 17, 2026 08:00 AM

Fried Frank, Thompson Coburn Face New Cybersecurity Class Actions

Thompson Coburn and Fried, Frank, Harris, Shriver & Jacobson are the latest law firms to face class-action lawsuits over cybersecurity...

Read Article

February 11, 2026 08:00 AM

Data breach plaintiffs drop lawsuit against law firm Thompson Coburn, New Mexico health system

A group of health care patients is dropping a data breach lawsuit against law firm Thompson Coburn and New Mexico-based Presbyterian...

Read Article

March 28, 2025 07:00 AM

Melissa Ventrone and Aleksandra Vold at Thompson Coburn LLP

Thompson Coburn LLP, ChicagoMelissa Ventrone (on the left) has joined Thompson Coburn as a partner and chair of its cybersecurity practice.

Read Article

November 21, 2024 08:00 AM

News - Data breach at law firm Thompson Coburn affects Presbyterian Healthcare patients

St. Louis-based law firm Thompson Coburn LLP, which provides legal services to Presbyterian Healthcare Services, experienced a data breach...

Read Article

November 12, 2024 08:00 AM

Law firm Thompson Coburn and healthcare client hit with data breach lawsuit

US law firm Thompson Coburn and its client Presbyterian Healthcare Services paved the way for a data breach by failing to safeguard health care and other...

Read Article

November 12, 2024 08:00 AM

Thompson Coburn, client targeted in class action over hacking

US firm Thompson Coburn and its client Presbyterian Healthcare Services have been named as defendants in a proposed class action over a data...

Read Article

November 08, 2024 08:00 AM

Thompson Coburn Data Breach Investigation

Strauss Borrelli PLLC, a leading data breach law firm, is investigating Thompson Coburn, LLP, and its client, Presbyterian Healthcare...

Read Article

November 07, 2024 08:00 AM

Presbyterian Healthcare Services & ORM Fertility Patients Affected by Data Breaches

Oregon Reproductive Medicine, doing business as ORM Fertility, has announced a security breach that impacted certain computer systems and...

Read Article

July 20, 2023 07:00 AM

Rutgers, Stony Brook Among Colleges Warning of Data Exposure From MOVEit Hack

The ongoing cyberattack exploiting MOVEit file-transfer software has taken a toll on US colleges and universities.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66720

SUMMARY

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing, causing the process to crash and resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66421

SUMMARY

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into agent transcript messages processed through the sessions API. Attackers can craft a message containing inline event handler payloads such as an img tag with an onerror attribute within the 60-character rendering budget, which is stored in the session transcript and interpolated unsanitized into innerHTML on the default landing page, allowing theft of session tokens and unauthorized calls to authenticated administrative endpoints including agent instruction file modification.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 9.3)

cvss3

Base Score: 9.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.8

Exploitability

2.8

REFERENCES

CVE-2026-66420

SUMMARY

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName() function within webserver.js when self-signed certificates are in use. Attackers can open cross-origin WebSocket connections to any of the twelve WebSocket endpoints, send crafted action commands to exfiltrate the server sessionKey used to sign session cookies, forge session tokens as arbitrary users, and gain full remote control of all managed devices governed by the MeshCentral instance.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-66369

SUMMARY

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap out-of-bounds read. On affected platforms, this condition reliably terminates the subscriber process and causes a denial-of-service.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66364

SUMMARY

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over read by one byte. This out-of-bounds read reliably terminates the subscriber process, resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…