What is the official website of Upper Peninsula Power Company ?

The official website of Upper Peninsula Power Company is http://www.uppco.com.

What is Upper Peninsula Power Company's cybersecurity risk score?

Upper Peninsula Power Company has an AI-generated cybersecurity risk score of 728 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Upper Peninsula Power Company experienced?

According to Rankiteo, Upper Peninsula Power Company currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Upper Peninsula Power Company been affected by any supply chain cyber incidents ?

According to Rankiteo, Upper Peninsula Power Company has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Upper Peninsula Power Company have SOC 2 Type 1 certification ?

According to Rankiteo, Upper Peninsula Power Company is not certified under SOC 2 Type 1.

Does Upper Peninsula Power Company have SOC 2 Type 2 certification ?

According to Rankiteo, Upper Peninsula Power Company does not hold a SOC 2 Type 2 certification.

Does Upper Peninsula Power Company comply with GDPR ?

According to Rankiteo, Upper Peninsula Power Company is not listed as GDPR compliant.

Does Upper Peninsula Power Company have PCI DSS certification ?

According to Rankiteo, Upper Peninsula Power Company does not currently maintain PCI DSS compliance.

Does Upper Peninsula Power Company comply with HIPAA ?

According to Rankiteo, Upper Peninsula Power Company is not compliant with HIPAA regulations.

Does Upper Peninsula Power Company have ISO 27001 certification ?

According to Rankiteo,Upper Peninsula Power Company is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Upper Peninsula Power Company operate in ?

Upper Peninsula Power Company operates primarily in the Utilities industry.

How many employees does Upper Peninsula Power Company have ?

Upper Peninsula Power Company employs approximately 103 people worldwide.

Does Upper Peninsula Power Company own any subsidiaries ?

Upper Peninsula Power Company presently has no subsidiaries across any sectors.

How many LinkedIn followers does Upper Peninsula Power Company have ?

Upper Peninsula Power Company's official LinkedIn profile has approximately 1,471 followers.

What is the NAICS classification code for Upper Peninsula Power Company ?

Upper Peninsula Power Company is classified under the NAICS code 22, which corresponds to Utilities.

Does Upper Peninsula Power Company have a Crunchbase profile ?

No, Upper Peninsula Power Company does not have a profile on Crunchbase.

Does Upper Peninsula Power Company have a LinkedIn profile ?

Yes, Upper Peninsula Power Company maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/upperpeninsulapowerco.

How many cybersecurity incidents has Upper Peninsula Power Company experienced ?

As of July 30, 2026, Rankiteo reports that Upper Peninsula Power Company has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Upper Peninsula Power Company have ?

Upper Peninsula Power Company has an estimated 4,429 peer or competitor companies worldwide.

What types of cybersecurity incidents has Upper Peninsula Power Company faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UPPC

Boost Score +25 with badge (5 left)

728

/1000

Moderate

753

/1000

Fair

Upper Peninsula Power Company Vendor Cyber Rating & Cyber Score

uppco.com

Add Your Compliance Badge

Upper Peninsula Power Company (UPPCO) is a regulated electric utility delivering safe, reliable energy to approximately 54,000 customers in 10 counties across Michigan's Upper Peninsula. UPPCO's company assets include seven hydroelectric renewable energy generation facilities that also offer public recreational opportunities on land and water and two combustion turbines providing a total generation capacity of approximately 80 megawatts, as well as 3,300 miles of electric distribution lines and 58 distribution substations. Upper Peninsula Power Company is proud to be a community supporter in the areas it serves. Visit us on X @uppco for outage updates.

UPPC A.I CyberSecurity Scoring

Scoring History

UPPC

Upper Peninsula Power Company CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Upper Peninsula Pow...

Breach

12/2022

UPP231121222

Upper Peninsula Pow...

Breach

6/2022

UPP1046072625

Loading…

A.I.

UPPC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UPPC

Incidents vs Utilities Industry Avg (This Year)

No incidents recorded for Upper Peninsula Power Company in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Upper Peninsula Power Company in 2026.

Incident Types UPPC vs Utilities Industry Avg (This Year)

No incidents recorded for Upper Peninsula Power Company in 2026.

Incident History - UPPC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Upper Peninsula Power Company Subsidiaries

Parent Company

UPPC

Utilities

Website: http://www.uppco.com

Company Size: 103

No subsidiary data available for this company.

Loading…

Upper Peninsula Power Company Similar Companies

American Electric Power

AEP.com

Our team at American Electric Power is committed to improving our customers' lives with reliable, affordable power. We are investing $54 billion from 2025 through 2029 to enhance service for customers and support the growing energy needs of our communities. Our nearly 16,000 employees operate and maintain the nation's largest electric transmission system with 40,000 line miles, along with more than 225,000 miles of distribution lines to deliver energy to 5.6 million customers in 11 states. AEP also is one of the nation's largest electricity producers with approximately 29,000 megawatts of diverse generating capacity. We are focused on safety and operational excellence, creating value for our stakeholders and bringing opportunity to our service territory through economic development and community engagement. Our family of companies includes AEP Ohio, AEP Texas, Appalachian Power (in Virginia and West Virginia), AEP Appalachian Power (in Tennessee), Indiana Michigan Power, Kentucky Power, Public Service Company of Oklahoma, and Southwestern Electric Power Company (in Arkansas, Louisiana, east Texas and the Texas Panhandle). AEP also owns AEP Energy, which provides innovative competitive energy solutions nationwide. AEP is headquartered in Columbus, Ohio. For more information, visit aep.com.

British Gas

britishgas.co.uk

Taking care of things. At British Gas we’re always looking at new ways to save energy and money for our customers. Everything we do from our trusted engineers to helpful call centre agents, and innovative product owners to digital marketing specialists, is about providing affordable, hassle-free service to keep British homes and businesses running smoothly. That’s why over 10 million UK homes and half a million businesses trust British Gas.

Dubai Electricity & Water Authority - DEWA

dewa.gov.ae

Dubai Electricity and Water Authority (DEWA), established on 1 January 1992, stands at the forefront of sustainable energy and water management. With a dedicated workforce of over 11,000 employees, we ensure reliable services across the entire chain of electricity and water production, transmission, and distribution. Aligned with Dubai’s 8 Guiding Principles and the 50-Year Charter, DEWA supports the UAE’s vision by delivering globally leading services and innovative energy and potable water solutions. Our purpose is to provide sustainable, efficient, and reliable power and water services, along with related innovative smart solutions, towards a Net-Zero future. Our commitment to excellence and innovation enriches lives and ensures the happiness of our stakeholders as we strive for a sustainable Net-Zero carbon future by 2050. Join DEWA in pioneering innovation and achieving excellence for a sustainable future.

Adani Group

adani.com

Adani Group is a diversified organisation in India comprising 10 publicly traded companies. It has created a world class transport and utility infrastructure portfolio that has a pan-India presence. Adani Group is headquartered in Ahmedabad, in the state of Gujarat, India. Over the years, Adani Group has positioned itself to be the market leader in its transport logistics and energy utility portfolio businesses focusing on large scale infrastructure development in India with O & M practices benchmarked to global standards. With four IG rated businesses, it is the only Infrastructure Investment Grade issuer in India. Adani owes its success and leadership position to its core philosophy of ‘Nation Building’ driven by ‘Growth with Goodness’ - a guiding principle for sustainable growth. Adani is committed to increase its ESG footprint by realigning its businesses with emphasis on climate protection and increasing community outreach through its CSR programme based on the principles of sustainability, diversity and shared values. Watch Pehle Pankha Ayega | Phir Bijli Aayegi : https://www.youtube.com/watch?v=1orXXuPzNmY

Correos

correos.es

Somos la empresa líder en comunicaciones físicas, digitales y de paquetería. Nuestra misión es prestar un servicio integral de calidad, ofreciendo soluciones y servicios en toda la cadena de valor del ecommerce con el objetivo de facilitar la vida a nuestros clientes. Distribuimos más de 5.100 millones de envíos al año y llegamos a 19 millones de hogares y dos millones de empresas. Somos la primera empresa del país por capilaridad y cobertura territorial, con más de 10.000 puntos de acceso a nuestros servicios: 2.200 oficinas multiservicio, 100 unidades de servicios especiales 1.821 unidades de distribución y 7.676 puntos de servicio en el ámbito rural (atención al cliente y/o reparto). Y, sobre todo, somos la empresa con mayor número de personas al servicio de personas. Más de 65.000 profesionales trabajando para que Correos sea cada día una empresa más moderna, eficiente y competitiva.

EDP

edp.com

Our story began more than 40 years ago. Today we are a global company, among the largest players in the energy sector in Europe and the 4th largest producer of wind energy. We are proud to be a leading utility integrated in the Dow Jones Sustainability Indexes (World). We want to build a new energy by promoting renewable sources. To do this, we have chosen ... ... to be 100% green by 2030; ... to be Net Zero by 2040; ... to innovate, to shape the energy sector; ... empower our communities to live more sustainably. Ours is the energy that strives to create a better future, inspired by people from four regional hubs. It is the energy that knows no borders, that never sleeps, and that connects us to you. We will harness wind, sun and water to lead the energy transition. We will all be green. We choose the Earth. Welcome to the official EDP Group LinkedIn page.

NextEra Energy, Inc.

nexteraenergy.com

NextEra Energy, Inc. (NYSE: NEE) is one of the largest electric power and energy infrastructure companies in North America and is a leading provider of electricity to American homes and businesses. Headquartered in Juno Beach, Florida, NextEra Energy is a Fortune 200 company that owns Florida Power & Light Company, America’s largest electric utility, which provides reliable electricity to approximately 12 million people across Florida. NextEra Energy also owns one of the largest energy infrastructure development companies in the U.S., NextEra Energy Resources, LLC. NextEra Energy and its affiliated entities are meeting America’s growing energy needs with a diverse mix of energy sources, including natural gas, nuclear, renewable energy and battery storage. For more information about NextEra Energy companies, visit these websites: www.NextEraEnergy.com, www.FPL.com, www.NextEraEnergyResources.com.

K-Electric

cb ke.com.pk

KE (formerly Karachi Electric Supply Company) is the only vertically integrated power utility in Pakistan that generates, transmits and distributes electricity to industrial, commercial, agricultural and residential consumers of Karachi (and its outskirts), a metropolis of 20 million people - Pakistan’s largest city. K-Electric (KE) is a public listed company incorporated in Pakistan in 1913 as KESC. Privatized in 2005 KE is the only vertically integrated utility in Pakistan supplying electricity within a 6500 km square territory including Karachi and its adjoining areas. The majority shares (66.4%) of the company are listed in the PSX owned by KES Power, a consortium of investors including Aljomaih Power Limited of Saudi Arabia, National Industries Group (Holding), Kuwait, and the Infrastructure and Growth Capital Fund (IGCF). The Government of Pakistan is also a minority shareholder (24.36%) in the company. KE is one of the county’s largest employers: with a workforce of around 11,000 employees. It is one of the only 12 companies in Pakistan’s industrial sector that have been included in the esteemed list of ‘Approved, Training Employer' by the ICAEW and is also the recipient of the Platinum Employer Status by the ACCA. KE secured a level ‘A’ rating from the Global Reporting Initiative (GRI) for its Integrated Sustainability Report for the year 2012. This makes K-Electric the first power utility in Pakistan to achieve the level ‘A’ rating for an integrated report. Visit our official Facebook and Twitter handles for 24/7 support.

Saudi Electricity Company

se.com.sa

The Saudi Electricity Company was established on the 5th of April in the year 2000, incorporated in accordance with Council of Ministers Mandate No. 169 dated November 30th, 1998, the Saudi Electricity Company was born out of the merger of smaller regional power company in the central, eastern, western and southern regions, as well as 10 small companies in the north of the Kingdom run by what was formerly known as the General Electricity Company. Vision To provide world-class energy services to our nation and our customers. Mission To empower the nation power the world.

Loading…

NEWS

Upper Peninsula Power Company CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 25, 2025 07:00 AM

Michigan charges forward with federal funding plan for EV network

Michigan's buildout of electric vehicle chargers, its future clouded by a federal funding freeze, is moving forward after receiving approval...

Read Article

June 16, 2025 07:00 AM

Gov. Whitmer Leads Delegation to Australia to Strengthen Business Ties and Defense Manufacturing, Tout Michigan’s Leadership in Industry Sectors

The governor plans to meet with companies in Michigan's growth industries, including mobility, defense, clean energy, healthcare and MedTech...

Read Article

May 21, 2025 07:00 AM

Cyberattack on northeast Wisconsin wireless company behind weeklong service problems

A cyberattack on a Wisconsin-based cell phone company has affected phone service for thousands of people over the last week.

Read Article

May 20, 2025 07:00 AM

Mobile carrier Cellcom confirms cyberattack behind extended outages

Cellcom has confirmed that a cyberattack is responsible for the widespread service outage and disruptions that began on the evening of May 14, 2025.

Read Article

January 07, 2025 08:00 AM

PowerSchool hack exposes student, teacher data from K-12 districts

Education software giant PowerSchool has confirmed it suffered a cybersecurity incident that allowed a threat actor to steal the personal...

Read Article

August 08, 2024 07:00 AM

Iron Mountain company Guide Star recognized for support of veterans

IRON MOUNTAIN, Mich. (WLUC) - Iron Mountain-based cybersecurity and IT company Guide Star was recognized by Michigan's Veterans' Employment...

Read Article

December 09, 2022 08:00 AM

Upper Peninsula Power Company Reports Recent Data Breach Compromising SSNs of More than 39k Customers

On November 23, 2022, Upper Peninsula Power Company (“UPPCO”) reported a data breach with the Maine Attorney General's office after the...

Read Article

May 25, 2022 07:00 AM

Summer internships opening for college students across UP

Summertime means new paid internship opportunities for interested students at UP companies like Resolve Surgical Technologies and Northcross...

Read Article

November 04, 2021 07:00 AM

Michigan Healthcare Cybersecurity Council and Invest UP team up for Building Resilience through Education and Engagement

UPPER MICHIGAN (WLUC) - Two Michigan firms are teaming up to teach health care workers about threats online.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-67595

SUMMARY

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing remote attackers to execute unauthorized code in any browser that renders the affected email template with JavaScript enabled. The payload establishes a WebSocket connection to a hardcoded command-and-control endpoint, installs a password-field keylogger using MutationObserver to capture dynamically added inputs, scrapes WhatsApp Web DOM content, and accepts remote commands to redirect or overwrite the rendered page.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.2

REFERENCES

CVE-2026-15157

SUMMARY

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, an application that passes a hand-rolled blob-like body (via request, stream, pipeline, or dispatch) whose type is derived from untrusted input allows an attacker to inject CRLF sequences and append arbitrary HTTP headers, potentially smuggling a second request past the upstream. Native Blob objects are safe because their constructor strips CRLF from the type, and fetch is unaffected because it validates headers, but ecosystem libraries that build duck-typed blob shapes from user input can reach the vulnerable path. This is the same defect class as CVE-2022-35948 and CVE-2026-1527, on a header sink that the earlier fixes did not cover. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-14643

SUMMARY

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to before 7.29.0 and from 8.0.0 up to before 8.9.0, the parser either drops the directive or stores a field name with literal quote characters, so the cache decision fails to recognize the qualification and the response is stored. In shared-cache mode, this lets a response containing one user's authenticated data be served from cache to a later caller, including an unauthenticated one, when both requests resolve to the same cache key. It affects applications that enable the cache interceptor in shared mode, forward Authorization headers upstream, and receive cacheable responses with qualified directives padded with whitespace around the equals sign. This is the whitespace-around-equals variant that the fix for CVE-2026-9678 did not normalize, and it is fixed in undici 7.29.0 and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2025-69949

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2025-69945

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/hospitalmanagementsystemproject/20250811-hospital-management-system-edit-patient.php-editid-sqli/20250811-hospital-management-system-edit-patient.php-editid-sqli.md

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…