Company Details
glencore
17,483
733,897
212
glencore.com
31
GLE_2843809
Completed

Glencore Company CyberSecurity Posture
glencore.comGlencore is one of the world’s largest global diversified natural resource companies and a major producer and marketer of more than 60 commodities that advance everyday life. Through a network of assets, customers and suppliers that spans the globe, we produce, process, recycle, source, market and distribute the commodities that support decarbonisation while meeting the energy needs of today.
Company Details
glencore
17,483
733,897
212
glencore.com
31
GLE_2843809
Completed
Between 800 and 849

Glencore Global Score (TPRM)XXXX



No incidents recorded for Glencore in 2025.
No incidents recorded for Glencore in 2025.
No incidents recorded for Glencore in 2025.
Glencore cyber incidents detection timeline including parent company and subsidiaries

Glencore is one of the world’s largest global diversified natural resource companies and a major producer and marketer of more than 60 commodities that advance everyday life. Through a network of assets, customers and suppliers that spans the globe, we produce, process, recycle, source, market and distribute the commodities that support decarbonisation while meeting the energy needs of today.


Jindal Steel and Power Limited (JSPL) is one of India’s fastest growing and largest integrated steel manufacturers, significantly present in the steel, power, mining and infrastructure segment. Part of the US $ 18 billion OP Jindal Group this young, agile and responsive company's business operations
Alcoa (NYSE: AA) is a global industry leader in bauxite, alumina and aluminum products with a vision to reinvent the aluminum industry for a sustainable future. With a values-based approach that encompasses integrity, operating excellence, care for people and courageous leadership, our purpose is to

Metalloinvest is a leading global iron ore and HBI producer and supplier and one of the regional steel producers. Metalloinvest extracts and exploits iron ore fr om the second largest measured iron ore reserve base in the world with approximately 14.6 billion tonnes of proven and probable reserve

We are a global leader in molten metal flow engineering and technology, primarily serving the global steel and foundry industries. We offer customised products, solutions and services to help our customers increase their efficiency and productivity, enhance quality, improve safety and reduce their

Committed to sustainable metals. Eramet transforme les ressources minérales de la Terre pour apporter des solutions durables et responsables à la croissance de l’industrie et aux défis de la transition énergétique Ses collaborateurs s’y engagent par leur démarche citoyenne et contributive

Full-service provider of analytical geochemistry services to the global mining industry. An integrated network of 90 laboratories around the world ensures consistent quality and dependable client service. Design, installation & operation of dedicated remote mine site labs. Prep facilities, analytica

Central Coal Fields Limited was established on 01/11/1975. It is a Miniratna company and is a subsidiary of Coal India Limited. CCL is headquartered at Darbhanga House, Ranchi, Jharkhand. It has Sixty-Five operative mines and Six washeries encompassing six districts of Jharkhand state. Central C
Hydro is a leading industrial company that builds businesses and partnerships for a more sustainable future. We develop industries that matter to people and society. Since 1905, Hydro has turned natural resources into valuable products for people and businesses, creating a safe and secure workplace

NISCO is a modernized and large-scale steel complex characterized by the steel products with high technologies and high added value. It is a top-class steelmaker nationwide providing quality medium & heavy plates, special bars, wire rods as well as the hot narrow strips. consisting of medium & heavy
.png)
Two globally dominant mining companies valued at $315 billion, with Rio Tinto and Glencore edging towards a merger, while BHP considers a fresh takeover offer...
Under the deal, billionaire Prajogo Pangestu's Chandra Asri Pacific and partner Glencore will take over Shell's oil refining and...
Alphabet is stirring up the tech scene with its whopping $32 billion acquisition of Wiz, a leading cybersecurity firm, to bolster its cloud services.
Evolution Mining has confirmed to authorities and the Australian Stock Exchange that it has been targeted in a ransomware attack.
ENERGYWIRE | Alex Beard, the billionaire former head of oil at Glencore, was charged with corruption by the U.K.'s top fraud agency,...
Glencore Ferroalloys is unwavering in its commitment to enhancing and educating communities with a focus on elevating everyday lives.
Glencore Plc. (Glencore) has been focusing on using artificial intelligence, blockchain, cybersecurity and drones to digitally transform its operations.
E&E NEWS PM | Mining giant Glencore PLC has agreed to pay up to $1.5 billion to authorities in the United States, United Kingdom and Brazil...
Recent cases including ENRC v SFO in the United Kingdom and Glencore in Australia have explored the nature of legal advice privilege.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Glencore is http://www.glencore.com.
According to Rankiteo, Glencore’s AI-generated cybersecurity score is 818, reflecting their Good security posture.
According to Rankiteo, Glencore currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Glencore is not certified under SOC 2 Type 1.
According to Rankiteo, Glencore does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Glencore is not listed as GDPR compliant.
According to Rankiteo, Glencore does not currently maintain PCI DSS compliance.
According to Rankiteo, Glencore is not compliant with HIPAA regulations.
According to Rankiteo,Glencore is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Glencore operates primarily in the Mining industry.
Glencore employs approximately 17,483 people worldwide.
Glencore presently has no subsidiaries across any sectors.
Glencore’s official LinkedIn profile has approximately 733,897 followers.
Glencore is classified under the NAICS code 212, which corresponds to Mining (except Oil and Gas).
Yes, Glencore has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/glencore.
Yes, Glencore maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/glencore.
As of December 11, 2025, Rankiteo reports that Glencore has not experienced any cybersecurity incidents.
Glencore has an estimated 3,709 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Glencore has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.