ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Utica National Insurance Group is a Top 100, nationally recognized insurer providing personal and commercial insurance products and services, with the second-largest errors and omissions business in the United States. Utica National sells its products through more than 2,200 independent insurance agents and employs over 1,200 people countrywide. The company was founded in 1914 and is headquartered in New Hartford, New York, with seven regional offices. Utica Mutual Insurance Company and its affiliated companies, New Hartford, NY.

Utica National Insurance Group A.I CyberSecurity Scoring

UNIG

Company Details

Linkedin ID:

uticanational

Employees number:

1,358

Number of followers:

25,892

NAICS:

524

Industry Type:

Insurance

Homepage:

uticanational.com

IP Addresses:

0

Company ID:

UTI_5745860

Scan Status:

In-progress

AI scoreUNIG Risk Score (AI oriented)

Between 700 and 749

https://images.rankiteo.com/companyimages/uticanational.jpeg
UNIG Insurance
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreUNIG Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/uticanational.jpeg
UNIG Insurance
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

UNIG Company CyberSecurity News & History

Past Incidents
1
Attack Types
1
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
Utica National Insurance GroupBreach50211/2022
Rankiteo Explanation :
Attack limited on finance or reputation

Description: Utica, New York-based Kelberman Center suffered a breach that impacted 3,501 individuals. The company detected suspicious activity within one user’s email inbox and the investigation revealed that an unauthorized party potentially accessed a limited number of Kelberman mailboxes between October 31 and November 3, 2022. The accessed files contained protected health information, including names, dates of birth, diagnosis and treatment information, and provider information.

Utica National Insurance Group
Breach
Severity: 50
Impact: 2
Seen: 11/2022
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: Utica, New York-based Kelberman Center suffered a breach that impacted 3,501 individuals. The company detected suspicious activity within one user’s email inbox and the investigation revealed that an unauthorized party potentially accessed a limited number of Kelberman mailboxes between October 31 and November 3, 2022. The accessed files contained protected health information, including names, dates of birth, diagnosis and treatment information, and provider information.

Ailogo

UNIG Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for UNIG

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Utica National Insurance Group in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Utica National Insurance Group in 2025.

Incident Types UNIG vs Insurance Industry Avg (This Year)

No incidents recorded for Utica National Insurance Group in 2025.

Incident History — UNIG (X = Date, Y = Severity)

UNIG cyber incidents detection timeline including parent company and subsidiaries

UNIG Company Subsidiaries

SubsidiaryImage

Utica National Insurance Group is a Top 100, nationally recognized insurer providing personal and commercial insurance products and services, with the second-largest errors and omissions business in the United States. Utica National sells its products through more than 2,200 independent insurance agents and employs over 1,200 people countrywide. The company was founded in 1914 and is headquartered in New Hartford, New York, with seven regional offices. Utica Mutual Insurance Company and its affiliated companies, New Hartford, NY.

Loading...
similarCompanies

UNIG Similar Companies

Blue Cross Blue Shield of Michigan

Blue Cross Blue Shield of Michigan is a nonprofit corporation and an independent licensee of the Blue Cross and Blue Shield Association. BCBSM's commitment to Michigan is what differentiates it from other health insurance companies doing business in the state. That mission has never changed. Nea

American Family Insurance

For more than 90 years, American Family Insurance has built its reputation on sound principles. We strive to provide you industry-leading service, exceptional claims experience and products that build long-term relationships. This is accomplished by treating policyholders fairly in a helpful and car

Aflac

Over 50 Million people worldwide have chosen Aflac because of our commitment to providing customers with the confidence that comes from knowing they have assistance in being prepared for whatever life may bring. With Aflac, whether you're a large business or a small one, you can provide your emplo

A Porto é mais que uma seguradora, é um ecossistema de soluções de serviços de proteção com tecnologia embarcada, para melhorar e facilitar a experiência do cliente. Com mais de 70 anos de mercado, a atuação da companhia se concentra hoje em quatro pilares estratégicos de negócio: Seguros, Saúde, Pr

GEICO

GEICO (Government Employees Insurance Company) offers a variety of insurance such as vehicle, property, business, life, umbrella, travel, pet, jewelry and more. The company, which was founded in 1936, is the third-largest auto insurer in the United States and insures vehicles in all 50 states an

Talanx

Talanx is one of the major European insurance groups. Under the HDI brand it operates both in Germany and abroad in industrial insurance as well as retail business. Further Group brands include Hannover Re, one of the world’s leading reinsurers, Targo insurers, LifeStyle Protection and neue leben, t

Prudential Indonesia (PT Prudential Life Assurance)

Listening. Understanding. Delivering. At Prudential Indonesia we deliver excellence by consistently innovating, creating new opportunities and growing our business to cater all of our customers'​ needs. With a vision of becoming truly world class, Prudential Indonesia provides quality services and

Marsh

We help our clients and colleagues grow — and our communities thrive — by protecting and promoting Possibility. We seek better ways to manage risk and define more effective paths to the right outcome. We go beyond risk to rewards for our clients, our company, our colleagues, and the communities in w

Lockton

What makes Lockton stand apart is also what makes us better: independence. Our private ownership empowers our 13,100+ Associates doing business in over 140+ countries to focus solely on clients' risk and insurance needs. With expertise that reaches around the globe, we deliver the deep understanding

newsone

UNIG CyberSecurity News

September 08, 2025 07:00 AM
NJ School Sues Insurer for Refusing to Settle Sex Abuse Case

A Catholic school in Morristown, N.J., is suing its insurer for refusing to settle litigation brought by a former student who alleged they...

July 17, 2025 07:00 AM
AM Best Downgrades Credit Ratings of Utica First Insurance Company

OLDWICK, N.J., July 17, 2025--AM Best has downgraded the Financial Strength Rating to A- (Excellent) from A (Excellent) and the Long-Term...

March 09, 2025 08:00 AM
Utica National builds on success, sets sights on $2B goal | Insurance

Utica National Insurance Group continues to build on its reputable success, with goals to continue improving its financial strength rating in 2025.

June 22, 2023 07:00 AM
List of victimized companies of MOVEit Cyber Attack

Let us list out the victims who have been impacted by the attack after the hack-ers gained control of Moveit file transfer software worldwide.

April 13, 2020 07:00 AM
Auto Insurers Offering $8-$10B in Discounts in Coronavirus Relief Effort; Updated List

The group of property/casualty insurers offering auto insurance premium discounts to recognize that insureds are driving less during the...

June 12, 2019 07:00 AM
Around the P&C insurance industry: June 12, 2019

Everest Insurance announced it has joined with All Risks, Ltd. to expand their workers' compensation capabilities for the marine industry.

April 19, 2017 07:00 AM
Connecticut’s Business Risk Partners Hires Stein and Rathore

Specialty underwriter and program administrator Business Risk Partners (BRP), headquartered in Windsor, Conn., has added two new members to...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

UNIG CyberSecurity History Information

Official Website of Utica National Insurance Group

The official website of Utica National Insurance Group is https://www.uticanational.com.

Utica National Insurance Group’s AI-Generated Cybersecurity Score

According to Rankiteo, Utica National Insurance Group’s AI-generated cybersecurity score is 721, reflecting their Moderate security posture.

How many security badges does Utica National Insurance Group’ have ?

According to Rankiteo, Utica National Insurance Group currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Utica National Insurance Group have SOC 2 Type 1 certification ?

According to Rankiteo, Utica National Insurance Group is not certified under SOC 2 Type 1.

Does Utica National Insurance Group have SOC 2 Type 2 certification ?

According to Rankiteo, Utica National Insurance Group does not hold a SOC 2 Type 2 certification.

Does Utica National Insurance Group comply with GDPR ?

According to Rankiteo, Utica National Insurance Group is not listed as GDPR compliant.

Does Utica National Insurance Group have PCI DSS certification ?

According to Rankiteo, Utica National Insurance Group does not currently maintain PCI DSS compliance.

Does Utica National Insurance Group comply with HIPAA ?

According to Rankiteo, Utica National Insurance Group is not compliant with HIPAA regulations.

Does Utica National Insurance Group have ISO 27001 certification ?

According to Rankiteo,Utica National Insurance Group is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Utica National Insurance Group

Utica National Insurance Group operates primarily in the Insurance industry.

Number of Employees at Utica National Insurance Group

Utica National Insurance Group employs approximately 1,358 people worldwide.

Subsidiaries Owned by Utica National Insurance Group

Utica National Insurance Group presently has no subsidiaries across any sectors.

Utica National Insurance Group’s LinkedIn Followers

Utica National Insurance Group’s official LinkedIn profile has approximately 25,892 followers.

NAICS Classification of Utica National Insurance Group

Utica National Insurance Group is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Utica National Insurance Group’s Presence on Crunchbase

No, Utica National Insurance Group does not have a profile on Crunchbase.

Utica National Insurance Group’s Presence on LinkedIn

Yes, Utica National Insurance Group maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/uticanational.

Cybersecurity Incidents Involving Utica National Insurance Group

As of December 16, 2025, Rankiteo reports that Utica National Insurance Group has experienced 1 cybersecurity incidents.

Number of Peer and Competitor Companies

Utica National Insurance Group has an estimated 15,075 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Utica National Insurance Group ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Incident Details

Can you provide details on each incident ?

Incident : Data Breach

Title: Kelberman Center Email Breach

Description: Kelberman Center suffered a breach that impacted 3,501 individuals. The company detected suspicious activity within one user’s email inbox and the investigation revealed that an unauthorized party potentially accessed a limited number of Kelberman mailboxes between October 31 and November 3, 2022. The accessed files contained protected health information, including names, dates of birth, diagnosis and treatment information, and provider information.

Date Detected: 2022-11-03

Type: Data Breach

Attack Vector: Email Compromise

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Breach.

How does the company identify the attack vectors used in incidents ?

Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Email.

Impact of the Incidents

What was the impact of each incident ?

Incident : Data Breach UTI204319123

Data Compromised: Names, Dates of birth, Diagnosis and treatment information, Provider information

Systems Affected: Email

What types of data are most commonly compromised in incidents ?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Protected Health Information and .

Which entities were affected by each incident ?

Incident : Data Breach UTI204319123

Entity Name: Kelberman Center

Entity Type: Healthcare Provider

Industry: Healthcare

Location: Utica, New York

Customers Affected: 3501

Data Breach Information

What type of data was compromised in each breach ?

Incident : Data Breach UTI204319123

Type of Data Compromised: Protected health information

Number of Records Exposed: 3501

Sensitivity of Data: High

Personally Identifiable Information: NamesDates of Birth

Initial Access Broker

How did the initial access broker gain entry for each incident ?

Incident : Data Breach UTI204319123

Entry Point: Email

Additional Questions

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2022-11-03.

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were Names, Dates of Birth, Diagnosis and Treatment Information, Provider Information and .

What was the most significant system affected in an incident ?

Most Significant System Affected: The most significant system affected in an incident was Email.

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Names, Provider Information, Diagnosis and Treatment Information and Dates of Birth.

What was the number of records exposed in the most significant breach ?

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 351.0.

Initial Access Broker

What was the most recent entry point used by an initial access broker ?

Most Recent Entry Point: The most recent entry point used by an initial access broker was an Email.

cve

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=uticanational' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge