ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Founded in 1998 through a strategic partnership between ADNOC and Borealis, Borouge was formed to build and operate a petrochemical complex in Al Ruways, United Arab Emirates, with a sales and marketing business in Singapore. Borouge, listed on the Abu Dhabi Securities Exchange (ADX symbol “BOROUGE” / ISIN “AEE01072B225”), is a leading petrochemical company that provides innovative and differentiated polyolefin solutions. ADNOC owns a majority 54% stake and Borealis holds a 36% stake in Borouge. With its base in the United Arab Emirates and Marketing & Sales head office in Singapore, Borouge employs more than 3,000 people representing over 40 nationalities and serves customers in 50 countries across the Middle East, Asia and Africa. Building on the unique Borstar® and Borlink™ technologies and over 50 years of experience in polyolefins, Borouge provides innovative, sustainable and value creating polymer solutions for packaging, infrastructure, energy, mobility, agriculture and healthcare applications that address global challenges such as climate change, food protection, access to fresh water, energy conservation, healthcare and waste management. In 2014 Borouge successfully commissioned its Borouge 3 expansion plant, increasing the Company’s annual capacity to 4.5 million tonnes of polyethylene and polypropylene and making Borouge’s site in Ruwais, UAE, the world’s largest integrated polyolefins complex. Borouge has expanded its commercial and logistics network in the Middle East and Asia, established a world-class Innovation Centre in Abu Dhabi and expanded its Application Centre in Shanghai. Focused on its mission, ‘value creation through people and innovation’, Borouge ensures that its customers are provided with differentiated products with improved reliability of supply throughout the value chain. Borouge is committed to the principles of sustainability and is a signatory of the chemical industry’s Responsible Care® Global Charter.

Borouge A.I CyberSecurity Scoring

Borouge

Company Details

Linkedin ID:

borouge

Employees number:

2,853

Number of followers:

150,431

NAICS:

325

Industry Type:

Chemical Manufacturing

Homepage:

borouge.com

IP Addresses:

0

Company ID:

BOR_1023355

Scan Status:

In-progress

AI scoreBorouge Risk Score (AI oriented)

Between 750 and 799

https://images.rankiteo.com/companyimages/borouge.jpeg
Borouge Chemical Manufacturing
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreBorouge Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/borouge.jpeg
Borouge Chemical Manufacturing
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Borouge Company CyberSecurity News & History

Past Incidents
1
Attack Types
1
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
ADNOC GroupCyber Attack100612/2022
Rankiteo Explanation :
Attack threatening the economy of a geographical region

Description: A significant BEC fraud that targets Middle Eastern-based businesses and people has been discovered. The effort has grown to include a new group of phishing domains that were created using the same name patterns as a prior campaign that was detected in July. The collection of phishing websites uses several forms of baits, including phoney employment offers, investment possibilities, vendor registration, and contract bidding, to target contractors in the UAE. Ninety percent of the 35 phishing domains examined target the Emirates National Oil Company, Sharjah National Oil Corporation, and Abu Dhabi National Oil Company (ADNOC) (ENOC). In order to deceive users, some domains have simply an email server (often provided by Zoho) active, some have duplicated the content of reputable companies, and some domains reroute to reputable domains. Threat actors behind this campaign are deliberately purchasing and registering domains with keywords that are similar to those of domains belonging to real businesses. The campaign also makes use of pre-stored static web pages with comparable templates to make it resistant to takedowns. If a domain is banned, these templates are uploaded to another domain.

ADNOC Group
Cyber Attack
Severity: 100
Impact: 6
Seen: 12/2022
Blog:
Rankiteo Explanation
Attack threatening the economy of a geographical region

Description: A significant BEC fraud that targets Middle Eastern-based businesses and people has been discovered. The effort has grown to include a new group of phishing domains that were created using the same name patterns as a prior campaign that was detected in July. The collection of phishing websites uses several forms of baits, including phoney employment offers, investment possibilities, vendor registration, and contract bidding, to target contractors in the UAE. Ninety percent of the 35 phishing domains examined target the Emirates National Oil Company, Sharjah National Oil Corporation, and Abu Dhabi National Oil Company (ADNOC) (ENOC). In order to deceive users, some domains have simply an email server (often provided by Zoho) active, some have duplicated the content of reputable companies, and some domains reroute to reputable domains. Threat actors behind this campaign are deliberately purchasing and registering domains with keywords that are similar to those of domains belonging to real businesses. The campaign also makes use of pre-stored static web pages with comparable templates to make it resistant to takedowns. If a domain is banned, these templates are uploaded to another domain.

Ailogo

Borouge Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for Borouge

Incidents vs Chemical Manufacturing Industry Average (This Year)

No incidents recorded for Borouge in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Borouge in 2025.

Incident Types Borouge vs Chemical Manufacturing Industry Avg (This Year)

No incidents recorded for Borouge in 2025.

Incident History — Borouge (X = Date, Y = Severity)

Borouge cyber incidents detection timeline including parent company and subsidiaries

Borouge Company Subsidiaries

SubsidiaryImage

Founded in 1998 through a strategic partnership between ADNOC and Borealis, Borouge was formed to build and operate a petrochemical complex in Al Ruways, United Arab Emirates, with a sales and marketing business in Singapore. Borouge, listed on the Abu Dhabi Securities Exchange (ADX symbol “BOROUGE” / ISIN “AEE01072B225”), is a leading petrochemical company that provides innovative and differentiated polyolefin solutions. ADNOC owns a majority 54% stake and Borealis holds a 36% stake in Borouge. With its base in the United Arab Emirates and Marketing & Sales head office in Singapore, Borouge employs more than 3,000 people representing over 40 nationalities and serves customers in 50 countries across the Middle East, Asia and Africa. Building on the unique Borstar® and Borlink™ technologies and over 50 years of experience in polyolefins, Borouge provides innovative, sustainable and value creating polymer solutions for packaging, infrastructure, energy, mobility, agriculture and healthcare applications that address global challenges such as climate change, food protection, access to fresh water, energy conservation, healthcare and waste management. In 2014 Borouge successfully commissioned its Borouge 3 expansion plant, increasing the Company’s annual capacity to 4.5 million tonnes of polyethylene and polypropylene and making Borouge’s site in Ruwais, UAE, the world’s largest integrated polyolefins complex. Borouge has expanded its commercial and logistics network in the Middle East and Asia, established a world-class Innovation Centre in Abu Dhabi and expanded its Application Centre in Shanghai. Focused on its mission, ‘value creation through people and innovation’, Borouge ensures that its customers are provided with differentiated products with improved reliability of supply throughout the value chain. Borouge is committed to the principles of sustainability and is a signatory of the chemical industry’s Responsible Care® Global Charter.

Loading...
similarCompanies

Borouge Similar Companies

INEOS

We are a global manufacturer of raw materials and a producer of energy used in everyday life. From medicines to mobile phones, agriculture to automotive, our products enhance standards of living for everyone around the world. We understand the challenge the world is facing, and we are working hard

At BASF, we create chemistry for a sustainable future. Our ambition: We want to be the preferred chemical company to enable our customers’ green transformation. We combine economic success with environmental protection and social responsibility. Around 112,000 employees in the BASF Group contribute

Brenntag

We're the global market leader in full-line range of chemical & ingredient products and value-added services. Our more than 17,500 employees provide tailor-made application, marketing and supply chain solutions. Our full-line portfolio comprises specialty and industrial chemicals and ingredients of

AkzoNobel

Since 1792, we’ve been supplying the innovative paints and coatings that help to color people’s lives and protect what matters most. Our world class portfolio of brands – including Dulux, International, Sikkens and Interpon – is trusted by customers around the globe. We’re active in more than 150 co

Ecolab

A trusted partner for millions of customers, Ecolab (NYSE:ECL) is a global sustainability leader offering water, hygiene and infection prevention solutions and services that protect people and the resources vital to life. Building on more than a century of innovation, Ecolab has annual sales of $16

UralChem

UralChem is a leading producer of nitrogen and phosphate fertilizers in Russia/CIS with production capacities of over 2.7 million tonnes of ammonium nitrate, 2.2 million tonnes of ammonia, 0.8 million tonnes of MAP and DAP, 0.8 million tonnes of complex fertilizers and 0.5 million tonnes of urea. Ur

Solenis

Solenis is a leading global producer of specialty chemicals focused on delivering sustainable solutions for water-intensive industries, including consumer, industrial, institutional, food and beverage, and pool and spa water markets. Owned by Platinum Equity, the company’s product portfolio includes

Sika is a specialty chemicals company with a globally leading position in the development and production of systems and products for bonding, sealing, damping, reinforcing, and protection in the building sector and industrial manufacturing. Sika has subsidiaries in 102 countries around the world and

dsm-firmenich

We are dsm-firmenich – innovators in nutrition, health, and beauty. We bring progress to life by combining the essential, the desirable, and the sustainable. From our master perfumers and flavorists to our expert nutritionists and scientists, our trailblazing teams work closely with customers, sup

newsone

Borouge CyberSecurity News

November 17, 2025 08:00 AM
Borouge to supply advanced Polyolefin solutions for ROX Motor’s new global flagship SUV

Borouge materials to feature in ROX Motor's ADAMAS SUV, marking accelerated progress in the partnership cemented at Make It in the Emirates...

November 04, 2025 08:00 AM
Borouge launches first made-in-UAE healthcare low-density polyethylene solution

Innovative solution will strengthen medical supply chains across the Middle East, Asia and Africa.

August 27, 2025 07:00 AM
Borouge collaborates with Yokogawa on autonomous AI control room

Borouge and Yokogawa UAE Industry to collaborate on proof of concept for AI-powered autonomous operations to enhance Borouge's UAE...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Borouge CyberSecurity History Information

Official Website of Borouge

The official website of Borouge is https://www.borouge.com/.

Borouge’s AI-Generated Cybersecurity Score

According to Rankiteo, Borouge’s AI-generated cybersecurity score is 795, reflecting their Fair security posture.

How many security badges does Borouge’ have ?

According to Rankiteo, Borouge currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Borouge have SOC 2 Type 1 certification ?

According to Rankiteo, Borouge is not certified under SOC 2 Type 1.

Does Borouge have SOC 2 Type 2 certification ?

According to Rankiteo, Borouge does not hold a SOC 2 Type 2 certification.

Does Borouge comply with GDPR ?

According to Rankiteo, Borouge is not listed as GDPR compliant.

Does Borouge have PCI DSS certification ?

According to Rankiteo, Borouge does not currently maintain PCI DSS compliance.

Does Borouge comply with HIPAA ?

According to Rankiteo, Borouge is not compliant with HIPAA regulations.

Does Borouge have ISO 27001 certification ?

According to Rankiteo,Borouge is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Borouge

Borouge operates primarily in the Chemical Manufacturing industry.

Number of Employees at Borouge

Borouge employs approximately 2,853 people worldwide.

Subsidiaries Owned by Borouge

Borouge presently has no subsidiaries across any sectors.

Borouge’s LinkedIn Followers

Borouge’s official LinkedIn profile has approximately 150,431 followers.

NAICS Classification of Borouge

Borouge is classified under the NAICS code 325, which corresponds to Chemical Manufacturing.

Borouge’s Presence on Crunchbase

No, Borouge does not have a profile on Crunchbase.

Borouge’s Presence on LinkedIn

Yes, Borouge maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/borouge.

Cybersecurity Incidents Involving Borouge

As of December 11, 2025, Rankiteo reports that Borouge has experienced 1 cybersecurity incidents.

Number of Peer and Competitor Companies

Borouge has an estimated 4,203 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Borouge ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

Incident Details

Can you provide details on each incident ?

Incident : BEC Fraud

Title: BEC Fraud Targeting Middle Eastern Businesses

Description: A significant BEC fraud that targets Middle Eastern-based businesses and people has been discovered. The effort has grown to include a new group of phishing domains that were created using the same name patterns as a prior campaign that was detected in July. The collection of phishing websites uses several forms of baits, including phoney employment offers, investment possibilities, vendor registration, and contract bidding, to target contractors in the UAE. Ninety percent of the 35 phishing domains examined target the Emirates National Oil Company, Sharjah National Oil Corporation, and Abu Dhabi National Oil Company (ADNOC) (ENOC). In order to deceive users, some domains have simply an email server (often provided by Zoho) active, some have duplicated the content of reputable companies, and some domains reroute to reputable domains. Threat actors behind this campaign are deliberately purchasing and registering domains with keywords that are similar to those of domains belonging to real businesses. The campaign also makes use of pre-stored static web pages with comparable templates to make it resistant to takedowns. If a domain is banned, these templates are uploaded to another domain.

Type: BEC Fraud

Attack Vector: Phishing

Motivation: Financial Gain

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Cyber Attack.

How does the company identify the attack vectors used in incidents ?

Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Phishing Domains.

Impact of the Incidents

Which entities were affected by each incident ?

Incident : BEC Fraud ADN223331222

Entity Name: Emirates National Oil Company

Entity Type: Corporation

Industry: Oil and Gas

Location: United Arab Emirates

Incident : BEC Fraud ADN223331222

Entity Name: Sharjah National Oil Corporation

Entity Type: Corporation

Industry: Oil and Gas

Location: United Arab Emirates

Incident : BEC Fraud ADN223331222

Entity Name: Abu Dhabi National Oil Company (ADNOC)

Entity Type: Corporation

Industry: Oil and Gas

Location: United Arab Emirates

Initial Access Broker

How did the initial access broker gain entry for each incident ?

Incident : BEC Fraud ADN223331222

Entry Point: Phishing Domains

High Value Targets: Emirates National Oil Company, Sharjah National Oil Corporation, Abu Dhabi National Oil Company (Adnoc),

Data Sold on Dark Web: Emirates National Oil Company, Sharjah National Oil Corporation, Abu Dhabi National Oil Company (Adnoc),

Additional Questions

Initial Access Broker

What was the most recent entry point used by an initial access broker ?

Most Recent Entry Point: The most recent entry point used by an initial access broker was an Phishing Domains.

cve

Latest Global CVEs (Not Company-Specific)

Description

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.

Risk Information
cvss3
Base: 9.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Description

Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.

Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Description

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.

Risk Information
cvss3
Base: 8.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Description

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Risk Information
cvss3
Base: 5.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=borouge' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge