What is the official website of UCSC-ITS ?

The official website of UCSC-ITS is https://its.ucsc.edu.

What is UCSC-ITS's cybersecurity risk score?

UCSC-ITS has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has UCSC-ITS experienced?

According to Rankiteo, UCSC-ITS currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has UCSC-ITS been affected by any supply chain cyber incidents ?

According to Rankiteo, UCSC-ITS has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Instructure (Incident ID: UC-1778200668) Instructure (Incident ID: KERTHECAL1778192774) Kiteworks (Incident ID: UCOKIT1774240010)

Does UCSC-ITS have SOC 2 Type 1 certification ?

According to Rankiteo, UCSC-ITS is not certified under SOC 2 Type 1.

Does UCSC-ITS have SOC 2 Type 2 certification ?

According to Rankiteo, UCSC-ITS does not hold a SOC 2 Type 2 certification.

Does UCSC-ITS comply with GDPR ?

According to Rankiteo, UCSC-ITS is not listed as GDPR compliant.

Does UCSC-ITS have PCI DSS certification ?

According to Rankiteo, UCSC-ITS does not currently maintain PCI DSS compliance.

Does UCSC-ITS comply with HIPAA ?

According to Rankiteo, UCSC-ITS is not compliant with HIPAA regulations.

Does UCSC-ITS have ISO 27001 certification ?

According to Rankiteo,UCSC-ITS is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does UCSC-ITS operate in ?

UCSC-ITS operates primarily in the IT Services and IT Consulting industry.

How many employees does UCSC-ITS have ?

UCSC-ITS employs approximately None employees people worldwide.

Does UCSC-ITS own any subsidiaries ?

UCSC-ITS presently has no subsidiaries across any sectors.

How many LinkedIn followers does UCSC-ITS have ?

UCSC-ITS's official LinkedIn profile has approximately 349 followers.

What is the NAICS classification code for UCSC-ITS ?

UCSC-ITS is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does UCSC-ITS have a Crunchbase profile ?

No, UCSC-ITS does not have a profile on Crunchbase.

Does UCSC-ITS have a LinkedIn profile ?

Yes, UCSC-ITS maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ucsc-its.

How many cybersecurity incidents has UCSC-ITS experienced ?

As of July 30, 2026, Rankiteo reports that UCSC-ITS has experienced 21 cybersecurity incidents.

How many peer or competitor companies does UCSC-ITS have ?

UCSC-ITS has an estimated 41,191 peer or competitor companies worldwide.

What types of cybersecurity incidents has UCSC-ITS faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Breach, Ransomware and Data Leak.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UCSC-ITS

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

UCSC-ITS Vendor Cyber Rating & Cyber Score

ucsc.edu

Add Your Compliance Badge

Information Technology Services (ITS) provides quality IT services to students, faculty, and staff at UC Santa Cruz. As the central IT service department, we have responsibilities ranging from supporting the individual academic divisions and business units to providing enterprise IT systems in support of instruction, research, and administrative business.

UCSC-ITS A.I CyberSecurity Scoring

Scoring History

UCSC-ITS

UCSC-ITS CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

University of Calif...

Cyber Attack

5/2026

Instructure

UC-1778200668

University of Calif...

Breach

5/2026

Instructure

KERTHECAL177819...

University of Calif...

Breach

3/2026

Kiteworks

UCOKIT177424001...

UCSC-ITS

Ransomware

100

12/2024

UCS000122224

UCSC-ITS

Breach

1/2024

UCS108072625

UCSC-ITS

Ransomware

100

10/2023

UCS1014070724

UCSC-ITS

Ransomware

100

6/2023

UCL0443723

UCSC-ITS

Breach

2/2023

UCS157082025

UCSC-ITS

Breach

9/2022

UCS1016090725

UCSC-ITS

Data Leak

06/2022

UCL11139223

UCSC-ITS

Breach

07/2021

UCS22335223

UCSC-ITS

Breach

12/2020

UCO831072725

UCSC-ITS

Breach

12/2020

UCS913080425

UCSC-ITS

Ransomware

100

6/2020

UCS658072625

UCSC-ITS

Breach

11/2017

UCS827072625

UCSC-ITS

Breach

8/2016

UCS457072625

UCSC-ITS

Breach

9/2015

UCL14320422

UCSC-ITS

Breach

03/2015

UCI2241522

UCSC-ITS

Breach

2/2014

UC-013091825

UCSC-ITS

Breach

9/2013

UCS212072625

UCSC-ITS

Breach

6/2011

UC-952091725

Loading…

A.I.

UCSC-ITS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UCSC-ITS

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for UCSC-ITS in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for UCSC-ITS in 2026.

Incident Types UCSC-ITS vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for UCSC-ITS in 2026.

Incident History - UCSC-ITS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

UCSC-ITS Subsidiaries

UCSC-ITS

IT Services and IT Consulting

Website: https://its.ucsc.edu

Company Size: 201-500 employees

University of California, Santa CruzHigher Education

UC Santa Cruz ScienceHigher Education

UC Santa Cruz Social SciencesHigher Education

UC Santa Cruz Genomics InstituteResearch Services

University of CaliforniaHigher Education

UCLAHigher Education

University of California, BerkeleyHigher Education

University of California, DavisHigher Education

UC Davis College of EngineeringHigher Education

UC Davis CLEAR CenterResearch Services

UC Davis College of Agricultural and Environmental SciencesHigher Education

UC Davis Internship and Career CenterHigher Education

UC Davis College of Biological SciencesHigher Education

UC Davis Center for Neuroengineering and MedicineResearch Services

UC Davis Graduate StudiesHigher Education

Jan Shrem and Maria Manetti Shrem Museum of ArtMuseums

UC Davis LibraryHigher Education

UC Davis Undergraduate EducationHigher Education

Quarter at Aggie SquareHigher Education

UC Davis Department of ChemistryHigher Education

UC Davis Division of Diversity, Equity & InclusionHigher Education

UC Davis Police DepartmentLaw Enforcement

UC Davis College of Letters and ScienceHigher Education

University of California, RiversideHigher Education

College of Humanities, Arts, and Social Sciences (CHASS)Education Administration Programs

R'Healthy CampusHigher Education

UCR Talent AcquisitionHigher Education

UCR Staff AssemblyHigher Education

UCR Okanagan CharterHigher Education

UCR LibraryHigher Education

College of Natural & Agricultural Sciences (CNAS)Higher Education

UCR Research and Economic DevelopmentHigher Education

UCR Palm DesertHigher Education

University of California, San FranciscoHigher Education

UCSF School of NursingHigher Education

UCSF Helen Diller Family Comprehensive Cancer CenterHospitals and Health Care

UCSF School of PharmacyHigher Education

UC San Francisco Graduate DivisionHigher Education

UCSF Clinical & Translational Science InstituteHospitals and Health Care

UCSF HealthHospitals and Health Care

UC San Diego HealthHospitals and Health Care

UC San DiegoHigher Education

UC San Diego Extended StudiesHigher Education

UC San Diego - Housing • Dining • HospitalityHospitality

UC San Diego Health Information ServicesHospitals and Health Care

UCI HealthHospitals and Health Care

University of California Office of the PresidentEducation Administration Programs

UCPathHuman Resources Services

California HIV/AIDS Research ProgramResearch Services

UCLA HealthHospitals and Health Care

UC IrvineHigher Education

UCI Division of Career PathwaysHigher Education

UC Santa BarbaraHigher Education

Loading…

UCSC-ITS Similar Companies

AeC

aec.com.br

A AeC é apontada consistentemente como a líder brasileira na entrega de soluções de experiência do cliente e gestão de processos terceirizados. Servindo as principais marcas do mercado nacional, conquistou nos três últimos anos a posição de Empresa do Ano de BPO pela conceituada Frost and Sullivan. Líder também nas práticas de ESG, recebe há oito anos consecutivos o título de Melhor Empresa de Serviços pelo Prêmio Época Negócios 360°. Com um olhar inovador, o seu diferencial está no modo como integra o cuidado com as pessoas e aplica tecnologia de ponta em seus processos, como inteligência artificial, robotic process automation, serviços em nuvem e ferramentas de analytics e segurança. Atualmente, a AeC conta com mais de 52 mil colaboradores em 20 unidades distribuídas por sete estados do país. É certificada pelo instituto Great Place to Work como uma das melhores empresas para se trabalhar. Com uma combinação única de Tecnologia e Calor Humano, a mais de 30 anos de história conquistando, apenas no último ano, 27 importantes prêmios e reconhecimentos do mercado. Venha evoluir conosco! Entre em contato com a gente através do e-mail: [email protected]

Kyndryl

cb kyndryl.com

We have the world’s best talent that design, run, and manage the most advanced and reliable technology infrastructure each day. Together, we think holistically about the health of these vital technology ecosystems. We are a focused, independent company that builds on our foundation of excellence by creating systems in new ways. Bringing in the right partners, investing in our business, and working side-by-side with our customers to unlock potential. We're raising the bar. Our experience speaks for itself: We have tens of thousands of highly skilled employees around the world serving most of the Fortune 100 companies. But our purpose is what drives us: Advancing the vital systems that power human progress. Because when a digital ecosystem is healthy, it can more readily adapt and support continuous growth and that opens up a world of possibility for everyone. Together, we are the heart of progress.

Tech Mahindra

techmahindra.com

Tech Mahindra offers technology consulting and digital solutions to global enterprises across industries, enabling transformative scale at unparalleled speed. With 149k+ professionals across 90+ countries helping 1100+ clients, TechM provides a full spectrum of services including consulting, information technology, enterprise applications, business process services, engineering services, network services, customer experience & design services, AI & analytics, and cloud & infrastructure services. It is the first Indian company in the world to have been awarded the Sustainable Markets Initiative’s Terra Carta Seal, in recognition of actively leading the charge to create a climate and nature-positive future. Tech Mahindra (NSE: TECHM) is part of the Mahindra Group, founded in 1945, one of the largest and most admired multinational federations of companies. Visit www.techmahindra.com to #ScaleAtSpeed

Sutherland

sutherlandglobal.com

Artificial Intelligence. Automation. Cloud Engineering. Advanced Analytics. For Enterprises, these are key factors of success. For us, they’re our core expertise. We work with global iconic brands. We bring them a unique value proposition through market-leading technologies and business process excellence. At the heart of it all is Digital Engineering services – the foundation that powers rapid innovation and scalable business transformation. We’ve created 363 unique and independent inventions, 250 of which are AI-based and rolled up under several patent grants in critical technologies. Leveraging our advanced products and platforms, we drive digital transformation at scale, optimize critical business operations, reinvent experiences, and pioneer new solutions, all provided through a seamless “as-a-service” model. For each company, we provide new keys for their businesses, the people they work with, and the customers they serve. With proven strategies and agile execution, we don’t just enable change — we engineer digital outcomes.

Infosys

infosys.com

Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem. Visit www.infosys.com to see how Infosys (NYSE: INFY) can help your enterprise navigate your next.

DXC Technology

dxc.com

DXC Technology helps global companies run their mission-critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private and hybrid clouds. The world's largest companies and public sector organizations trust DXC to deploy services to drive new levels of performance, competitiveness, and customer experience across their IT estates. Instagram: https://www.instagram.com/dxctechnology Youtube: https://www.youtube.com/DXCTechnology TikTok: https://www.tiktok.com/@dxc_technology

inDrive

cb inDrive.com

inDrive is a global mobility and urban services platform. The inDrive app has been downloaded over 400 million times, and has been the second most downloaded mobility app for the third consecutive year. In addition to ride-hailing, inDrive provides an expanding list of urban services, including intercity transportation and delivery. In 2023, inDrive launched New Ventures, a venture and M&A arm. inDrive operates in 1065 cities in 48 countries. Driven by its mission of challenging social injustice, the company is committed to having a positive impact on the lives of one billion people by 2030. It pursues this goal both through its core business, which supports local communities via a fair pricing model; and through the work of inVision, its non-profit arm. inVision’s community empowerment programs help to advance education, sports, arts and sciences, gender equality and other vital initiatives. For more information visit www.inDrive.com

HGS

hgs.cx

A global leader in optimizing the customer experience lifecycle, digital transformation, and business process management, HGS is helping its clients become more competitive every day. HGS combines automation, analytics, and artificial intelligence with deep domain expertise focusing on digital customer experiences, back-office processing, contact centers, and HRO solutions. Part of the multi-billion-dollar conglomerate Hinduja Group, HGS takes a “globally local” approach with over 18,000+ employees across 38 delivery centers in 9 countries.

NTT DATA Business Solutions

nttdata-solutions.com

We understand the business of our clients and know what it takes to transform it into the future. At NTT DATA Business Solutions, we drive innovation – from advisory and implementation to managed services and beyond. With SAP at our core and a powerful ecosystem of partners, we continuously improve solutions and technology to make them work for companies – and for their people. Aiming to transform, grow and become more successful? We provide you with more than in-depth expertise for SAP solutions: As your passionate partner, we connect your business opportunities with the latest technologies – and offer you a unique approach to get the job done as smoothly as possible. Our close ties to our partners give you access to innovative solutions and developments. Being part of the global NTT DATA group enables us to master any scope of project. With operations in more than 30 countries, we have enabled thousands of companies become more efficient and effective during the last three decades. Our more than 16,000 experts around the world will also accompany you on your journey toward a truly intelligent enterprise – wherever you want to start!

Loading…

NEWS

UCSC-ITS CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 10, 2025 07:00 AM

AI leaders gather in Silicon Valley for UC Santa Cruz, SF Tech Week event

The first panel of the day focused on embodied AI, featuring UC Santa Cruz engineering researchers and AI industry leaders. Press Inquiries...

Read Article

January 16, 2025 08:00 AM

Charting the future of finance

Sameet Mehta has built a career turning data into decisions and ideas into impactful businesses. As the newly appointed advisory board chair of the Center for...

Read Article

January 16, 2025 08:00 AM

A legacy of philanthropy and leadership at UC Santa Cruz

Bruce's legacy of philanthropy and service is a testament to his enduring belief in the university's potential to make a difference—in the lives...

Read Article

October 04, 2024 07:00 AM

Baskin Engineering welcomes a cohort of 12 new faculty

Twelve new faculty members are joining the Baskin School of Engineering for the 2024-25 academic year. With backgrounds in academia and industry,

Read Article

July 19, 2024 07:00 AM

UC Santa Cruz to Host Semiconductor Workshop

A workshop on July 26-27 for students as well as the general public will feature presentations, panel discussions, group activities and lectures by scientists.

Read Article

May 17, 2024 07:00 AM

Ukraine blackouts caused by malware attacks warn against evolving cybersecurity threats to the physical world

A new paper presents the first study of how two major malware attacks in Ukraine operated and interacted with the physical power system equipment to cause...

Read Article

May 17, 2024 07:00 AM

Two Santa Cruz students uncover security bug that let anyone do their laundry for free

Updated: CSC ServiceWorks belatedly apologized and thanked the security researchers after ignoring requests to fix a security bug.

Read Article

October 13, 2023 02:43 PM

IU-led OmniSOC welcomes University of California, Santa Cruz

UC Santa Cruz the latest university to partner with premier higher education security operations center. Security and privacy Oct 10, 2023.

Read Article

May 25, 2023 03:20 PM

Event

This in-person event will feature two days of compelling panel discussions, workshops, and networking opportunities at the University Center.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66064

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-66063

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-64863

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-62325

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-59921

SUMMARY

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.1

REFERENCES

https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…