Company Details
british-american-tobacco
46,297
1,793,937
3122
bat.com
23
BAT_1106777
Completed

BAT Company CyberSecurity Posture
bat.comWe are BAT, a truly global company with a highly successful past and a transformational future. Founded in 1902, we have evolved into one of the world’s leading consumer goods businesses, the only truly global company in our sector. As a leading FTSE company, we are spread across six continents and have more than 46,000 people worldwide. Our purpose is to build A Better Tomorrow™ by reducing the health impact of our business through offering a greater choice of enjoyable and less risky*† products for our consumers. We are becoming a business that defines itself, not by the product it sells, but by the consumer needs that it meets. We are creating the brands of the future – brands with purpose. Digital transformation, technology and innovation are driving this change. And it will be actioned by our people, through our collaborative company culture and values. And while we have a long and proud history of sustainability achievements, we are transforming from being a business where sustainability has always been important to one where it is front and centre in all that we do. Our ESG efforts and commitment to high standards placed us on the CDP A list for climate change in 2022. We have also been in the prestigious Dow Jones Sustainability Indices for 21 years. Since 2018, we have been named as a Global Top Employer for our long-standing commitment to sustaining a diverse and inclusive culture and providing career opportunities for all of our people around the world. Together, we are building A Better Tomorrow™. * Based on the weight of evidence and assuming a complete switch from cigarette smoking. These products are not risk free and are addictive. † Our Vapour product Vuse (including Alto, Solo, Ciro and Vibe), and certain products, including Velo, Grizzly, Kodiak, and Camel Snus, which are sold in the U.S., are subject to FDA regulation and no reduced-risk claims will be made as to these products without agency clearance.
Company Details
british-american-tobacco
46,297
1,793,937
3122
bat.com
23
BAT_1106777
Completed
Between 800 and 849

BAT Global Score (TPRM)XXXX



No incidents recorded for BAT in 2025.
No incidents recorded for BAT in 2025.
No incidents recorded for BAT in 2025.
BAT cyber incidents detection timeline including parent company and subsidiaries

We are BAT, a truly global company with a highly successful past and a transformational future. Founded in 1902, we have evolved into one of the world’s leading consumer goods businesses, the only truly global company in our sector. As a leading FTSE company, we are spread across six continents and have more than 46,000 people worldwide. Our purpose is to build A Better Tomorrow™ by reducing the health impact of our business through offering a greater choice of enjoyable and less risky*† products for our consumers. We are becoming a business that defines itself, not by the product it sells, but by the consumer needs that it meets. We are creating the brands of the future – brands with purpose. Digital transformation, technology and innovation are driving this change. And it will be actioned by our people, through our collaborative company culture and values. And while we have a long and proud history of sustainability achievements, we are transforming from being a business where sustainability has always been important to one where it is front and centre in all that we do. Our ESG efforts and commitment to high standards placed us on the CDP A list for climate change in 2022. We have also been in the prestigious Dow Jones Sustainability Indices for 21 years. Since 2018, we have been named as a Global Top Employer for our long-standing commitment to sustaining a diverse and inclusive culture and providing career opportunities for all of our people around the world. Together, we are building A Better Tomorrow™. * Based on the weight of evidence and assuming a complete switch from cigarette smoking. These products are not risk free and are addictive. † Our Vapour product Vuse (including Alto, Solo, Ciro and Vibe), and certain products, including Velo, Grizzly, Kodiak, and Camel Snus, which are sold in the U.S., are subject to FDA regulation and no reduced-risk claims will be made as to these products without agency clearance.


PT Gudang Garam Tbk is one of the leading cigarette producers that has been established since 1958 in the town of Kediri, East Java. Measured by assets controlled, product sales, duties and taxes paid to the Indonesian Government and by total number of employees, PT Gudang Garam, Tbk. is the bigges

We’re JTI, Japan Tobacco International and we believe in freedom. We think that the possibilities are limitless when you’re free to choose. In fact, we’ve spent over 20 years innovating, creating new and better products for our consumers to choose from. It’s how we’ve grown to be present in 130 coun

At Djarum, we view our people as the foundation of our success. We look for people who have a passion for progress, combined with key qualities of humility, dedication and sincerity. These are the values have enabled us to work harmoniously yet dynamically over the past six decades, generating real

Established in 1913, PT Hanjaya Mandala Sampoerna Tbk. (Sampoerna) has been playing a significant part in the tobacco industry for more than a century. As a subsidiary of PT Philip Morris Indonesia (PMID) and an affiliate to Philip Morris International Inc. (PMI) since 2005, we have the vision to be
.png)
Science News: So no, Gotham isn't calling. But if you look up at the night sky and think you see Batman's signal, you're not wrong.
Cricket News: Karun Nair's stellar domestic form continues with a double century for Karnataka against Kerala. Despite recent national team...
MLB News: Shohei Ohtani will start Game 7 of the 2025 World Series for the Dodgers against the Blue Jays, utilizing a special MLB rule to...
Cricket News: Former opener Sadagoppan Ramesh slammed India's batting order flux in the second T20I against Australia.
Cricket News: Jemimah Rodrigues, a cricketing prodigy from Mumbai, honed her skills alongside future stars at MIG Cricket Club.
Cricket News: Abhishek Sharma showcased remarkable composure and strokeplay, scoring a fluent half-century despite wickets tumbling around...
South Texas College's Bachelor of Applied Technology Computer Information Technology (BAT-CIT) through its upcoming Cybersecurity Clinic now...
Cricket News: Former India all-rounder Irfan Pathan slammed India's batting collapse against Australia, calling it a \"mismatch.
STC BAT-CIT student earns Microsoft Cybersecurity scholarship · Martinez's interest in technology began unexpectedly when she was 17 and working...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of BAT is http://www.bat.com.
According to Rankiteo, BAT’s AI-generated cybersecurity score is 847, reflecting their Good security posture.
According to Rankiteo, BAT currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, BAT is not certified under SOC 2 Type 1.
According to Rankiteo, BAT does not hold a SOC 2 Type 2 certification.
According to Rankiteo, BAT is not listed as GDPR compliant.
According to Rankiteo, BAT does not currently maintain PCI DSS compliance.
According to Rankiteo, BAT is not compliant with HIPAA regulations.
According to Rankiteo,BAT is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
BAT operates primarily in the Tobacco Manufacturing industry.
BAT employs approximately 46,297 people worldwide.
BAT presently has no subsidiaries across any sectors.
BAT’s official LinkedIn profile has approximately 1,793,937 followers.
BAT is classified under the NAICS code 3122, which corresponds to Tobacco Manufacturing.
Yes, BAT has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/british-american-tobacco.
Yes, BAT maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/british-american-tobacco.
As of December 11, 2025, Rankiteo reports that BAT has not experienced any cybersecurity incidents.
BAT has an estimated 112 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, BAT has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.