Company Details
bradesco
85,423
3,435,720
52211
banco.bradesco
0
BAN_3170008
In-progress

Banco Bradesco Company CyberSecurity Posture
banco.bradescoO Bradesco é um dos líderes do setor financeiro privado e um dos maiores empregadores na categoria. Além disso, apresenta o melhor índice de eficiência entre os bancos de varejo. Nossa missão é fornecer soluções, produtos e serviços financeiros e de seguros com agilidade e competência, principalmente por meio da inclusão bancária e da promoção da mobilidade social, contribuindo para o desenvolvimento sustentável e a construção de relacionamentos duradouros. Nós acreditamos nas pessoas. Desde o início de nossas atividades, reconhecemos no valor do desempenho e no potencial realizador das pessoas a base de sustentação dos negócios da Organização Bradesco. Nossa atuação está inserida e se expande continuamente, por todo o território nacional, ampliando o universo de clientes e parceiros, contemplando uma gama de diversidade que é a própria expressão da estrutura social brasileira. Acreditamos em nossa capacidade de promover crescimento sustentado, para as pessoas e por meio delas. Siga com a gente também aqui, no LinkedIn!
Company Details
bradesco
85,423
3,435,720
52211
banco.bradesco
0
BAN_3170008
In-progress
Between 750 and 799

Banco Bradesco Global Score (TPRM)XXXX

Description: The Vermont Office of the Attorney General disclosed a data breach affecting **Bradesco Securities, Inc.** on **July 28, 2023**, after detecting unauthorized access to its systems on **July 11, 2023**. The incident involved the compromise of **sensitive employee information**, specifically **Social Security numbers (SSNs) and state identification numbers**. While the exact number of impacted individuals remains undisclosed, the breach poses significant risks, including potential identity theft, financial fraud, or targeted phishing attacks against employees. The exposure of such highly sensitive data underscores vulnerabilities in the company’s cybersecurity defenses, particularly in safeguarding personally identifiable information (PII). Given the nature of the stolen data, affected employees may face long-term repercussions, including credit score damage, unauthorized account openings, or misuse of their identities for illicit activities. The breach also raises concerns about internal security protocols, as the unauthorized access went undetected for an unspecified period before discovery.


No incidents recorded for Banco Bradesco in 2025.
No incidents recorded for Banco Bradesco in 2025.
No incidents recorded for Banco Bradesco in 2025.
Banco Bradesco cyber incidents detection timeline including parent company and subsidiaries

O Bradesco é um dos líderes do setor financeiro privado e um dos maiores empregadores na categoria. Além disso, apresenta o melhor índice de eficiência entre os bancos de varejo. Nossa missão é fornecer soluções, produtos e serviços financeiros e de seguros com agilidade e competência, principalmente por meio da inclusão bancária e da promoção da mobilidade social, contribuindo para o desenvolvimento sustentável e a construção de relacionamentos duradouros. Nós acreditamos nas pessoas. Desde o início de nossas atividades, reconhecemos no valor do desempenho e no potencial realizador das pessoas a base de sustentação dos negócios da Organização Bradesco. Nossa atuação está inserida e se expande continuamente, por todo o território nacional, ampliando o universo de clientes e parceiros, contemplando uma gama de diversidade que é a própria expressão da estrutura social brasileira. Acreditamos em nossa capacidade de promover crescimento sustentado, para as pessoas e por meio delas. Siga com a gente também aqui, no LinkedIn!

FAB, the UAE’s largest bank and one of the world’s largest financial institutions offers a an extensive range of tailor-made solutions, and products and services, to provide a customised banking experience. Through its strategic offerings, it looks to meet the banking needs of customers across the w
ICICI Bank is one of India’s leading private sector banks, offering a wide range of banking products and services to corporate, Small and Medium Enterprises (SME) and individual customers across the country. The Bank offers multi-channel touch points including branches, ATMs, mobile banking, interne

About Kotak Mahindra Group: Established in 1985, the Kotak Mahindra Group is one of India’s leading financial services conglomerates. In February 2003, Kotak Mahindra Finance Ltd. (KMFL), the Group’s flagship company, received a banking license from the Reserve Bank of India (RBI). With this, KMF

HBL, Pakistan’s leading Bank, was the first commercial Bank to be established in Pakistan in 1947. Over the years, HBL has grown its branch network and maintained its position as the largest private sector Bank in Pakistan with over 1,728+ branches and 2,300+ ATMs globally, serving 37million+ client

With our universal banking model, our pan-African scope, the complementarity of our businesses and our solid expertise, we are a leading player in the Moroccan and African financial sector. For over a century, we’ve been able to adapt by diversifying our business lines, renewing our offers and rev

Equitas Small Finance Bank is an active member of the communities where we live and work, and a strong philanthropic partner enabling individuals, families, businesses, and entire communities in their financial aspirations with seamless banking services. We take the responsibility to be good neighbo
Societe Generale is one of the leading European financial services groups. Based on a diversified and integrated banking model, the Group combines financial strength and proven expertise in innovation with a strategy of sustainable growth. Committed to the positive transformations of the world’s soc

Established in 1987 in Shenzhen, the forefront of China’s reform and opening-up drive, China Merchants Bank ("CMB") has developed into the most influential commercial bank brand in China thanks to continuous financial innovation, quality customer service, prudent management and strong business perfo

Bank of America is one of the world's largest financial institutions, serving individuals, small- and middle-market businesses and large corporations with a full range of banking, investing, asset management and other financial and risk management products and services. The company serves approximat
.png)
Does Banco Bradesco (BBD) have what it takes to be a top stock pick for momentum investors? Let's find out.
Banco Bradesco's stock narrative has recently shifted, with its fair value price target moving from R$19.25 to R$19.64.
Brazilian bank Banco Bradesco's stock is already up 84% in 2025. Yesterday, the bank stock's options volume was nearly 21 times its average...
Banco Bradesco S.A. reported earnings results for the third quarter and nine months ended September 30, 2025. For the third quarter,...
Banco Bradesco S.A. (NYSE:BBD) is included among the 10 Best Dividend Stocks Under $10 to Invest in. Banco Bradesco S.A. (NYSE:BBD),...
With significant upside potential, Cosan S.A. (NYSE:CSAN) secures a spot on our list of the 7 best oil and gas penny stocks to buy according...
Trend™ Research has identified an active campaign spreading via WhatsApp through a ZIP file attachment. When executed, the malware...
Banco Bradesco (BBD) has been upgraded to a Zacks Rank #2 (Buy), reflecting growing optimism about the company's earnings prospects.
With significant hedge fund interest, Banco Bradesco S.A. (NYSE:BBD) secures a spot on our list of the 10 Best Bank Penny Stocks to Buy...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Banco Bradesco is http://banco.bradesco.
According to Rankiteo, Banco Bradesco’s AI-generated cybersecurity score is 780, reflecting their Fair security posture.
According to Rankiteo, Banco Bradesco currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Banco Bradesco is not certified under SOC 2 Type 1.
According to Rankiteo, Banco Bradesco does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Banco Bradesco is not listed as GDPR compliant.
According to Rankiteo, Banco Bradesco does not currently maintain PCI DSS compliance.
According to Rankiteo, Banco Bradesco is not compliant with HIPAA regulations.
According to Rankiteo,Banco Bradesco is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Banco Bradesco operates primarily in the Banking industry.
Banco Bradesco employs approximately 85,423 people worldwide.
Banco Bradesco presently has no subsidiaries across any sectors.
Banco Bradesco’s official LinkedIn profile has approximately 3,435,720 followers.
Banco Bradesco is classified under the NAICS code 52211, which corresponds to Commercial Banking.
No, Banco Bradesco does not have a profile on Crunchbase.
Yes, Banco Bradesco maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bradesco.
As of December 11, 2025, Rankiteo reports that Banco Bradesco has experienced 1 cybersecurity incidents.
Banco Bradesco has an estimated 6,988 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Detection and Response: The company detects and responds to cybersecurity incidents through an communication strategy with public disclosure via vermont ag..
Title: Bradesco Securities, Inc. Data Breach (2023)
Description: The Vermont Office of the Attorney General reported a data breach incident involving Bradesco Securities, Inc. The breach involved unauthorized access to sensitive employee information, including Social Security numbers and state identification numbers.
Date Detected: 2023-07-11
Date Publicly Disclosed: 2023-07-28
Type: Data Breach
Common Attack Types: The most common types of attacks the company has faced is Breach.

Data Compromised: Social security numbers, State identification numbers
Identity Theft Risk: High (SSNs and state IDs exposed)
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personally Identifiable Information (Pii) and .

Entity Name: Bradesco Securities, Inc.
Entity Type: Financial Services
Industry: Securities/Investment
Location: Vermont, USA (reported by Vermont AG)
Customers Affected: Unknown (employees affected)

Communication Strategy: Public disclosure via Vermont AG

Type of Data Compromised: Personally identifiable information (pii)
Number of Records Exposed: Unknown
Sensitivity of Data: High
Data Exfiltration: Likely (unauthorized access confirmed)
Personally Identifiable Information: Social Security numbersstate identification numbers

Regulatory Notifications: Vermont Office of the Attorney General

Source: Vermont Office of the Attorney General
Date Accessed: 2023-07-28
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Vermont Office of the Attorney GeneralDate Accessed: 2023-07-28.

Investigation Status: Ongoing (number of affected individuals unknown)
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Public disclosure via Vermont AG.
Most Recent Incident Detected: The most recent incident detected was on 2023-07-11.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2023-07-28.
Most Significant Data Compromised: The most significant data compromised in an incident were Social Security numbers, state identification numbers and .
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Social Security numbers and state identification numbers.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 0.
Most Recent Source: The most recent source of information about an incident is Vermont Office of the Attorney General.
Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing (number of affected individuals unknown).
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.