Company Details
lockheed-martin
102,502
2,952,468
336414
lockheedmartin.com
0
LOC_8511870
In-progress

Lockheed Martin Company CyberSecurity Posture
lockheedmartin.comThe world relies on what we do. Headquartered in Bethesda, Maryland, with offices across the U.S. and around the globe, our team delivers solutions that strengthen national security, shape industries and push engineering and technology to new levels. We collaborate to win. We put our customers first. And we perform with excellence. The best careers are built at Lockheed Martin. Join us.
Company Details
lockheed-martin
102,502
2,952,468
336414
lockheedmartin.com
0
LOC_8511870
In-progress
Between 800 and 849

Lockheed Martin Global Score (TPRM)XXXX

Description: In August 2022, Lockheed Martin, a global aerospace, defense, and security company, was targeted by the pro-Russian hacktivist group **Killnet** in a **distributed denial-of-service (DDoS) attack**. The group claimed to have not only disrupted Lockheed Martin’s online services but also **exfiltrated employee data** during the incident. However, Lockheed Martin publicly **denied the data breach**, asserting confidence in their cybersecurity measures and stating that no sensitive information was compromised. The attack, while primarily disruptive, raised concerns due to Killnet’s assertions about stolen employee records. If true, the breach could have exposed internal personnel data, including potentially sensitive details of current or former employees. The incident underscored vulnerabilities in critical defense contractors’ digital infrastructure, particularly amid geopolitical tensions. Though Lockheed Martin downplayed the severity, the alleged theft of employee data—if validated—would classify the attack as having **significant internal data exposure risks**, aligning with broader trends of cyber threats targeting high-profile defense and aerospace firms.


No incidents recorded for Lockheed Martin in 2025.
No incidents recorded for Lockheed Martin in 2025.
No incidents recorded for Lockheed Martin in 2025.
Lockheed Martin cyber incidents detection timeline including parent company and subsidiaries

The world relies on what we do. Headquartered in Bethesda, Maryland, with offices across the U.S. and around the globe, our team delivers solutions that strengthen national security, shape industries and push engineering and technology to new levels. We collaborate to win. We put our customers first. And we perform with excellence. The best careers are built at Lockheed Martin. Join us.

Thales (Euronext Paris: HO) is a global leader in advanced technologies for the Defence, Aerospace, and Cyber & Digital sectors. Its portfolio of innovative products and services addresses several major challenges: sovereignty, security, sustainability and inclusion. The Group invests more than €4

With headquarters in New York City and approximately 31,000 employees worldwide, L3 develops advanced defense technologies and commercial solutions in pilot training, aviation security, night vision and EO/IR, weapons, maritime systems and space. The company reported 2018 sales of $10.2 billion. To
Amentum is a global leader in advanced engineering and innovative technology solutions, trusted by the United States and its allies to address their most significant and complex challenges in science, security and sustainability. Our people apply undaunted curiosity, relentless ambition and boundles

As an international naval defence player, Naval Group is a partner for countries seeking to maintain control of their maritime sovereignty. Naval Group develops innovative solutions to meet its customers’ requirements. The group is present throughout the entire life cycle of vessels. It designs, pro

The Republic of Korea Air Force (ROKAF; Korean: 대한민국 공군; Hanja: 大韓民國 空軍; Revised Romanization: Daehanminguk Gong-gun), also known as the ROK Air Force, is the aerial warfare service branch of South Korea, operating under the South Korean Ministry of National Defense. The ROKAF has about 450 combat
At BAE Systems, we help our customers to stay a step ahead when protecting people and national security, critical infrastructure and vital information. We provide some of the world’s most advanced, technology-led defence, aerospace and security solutions and employ a skilled workforce of 107,000 peo
As an integrated technology group, the listed company Rheinmetall AG, headquartered in Düsseldorf, stands for a company that is as strong in substance as it is successful internationally, and that is active in various markets with an innovative range of products and services. Rheinmetall is a leadin

The Indian Army is the largest branch of the Indian Armed Forces and is responsible for land-based military operations. Its primary mission is the National Security and Defense of India from external aggression and threats, and maintaining peace and security within its borders. It also conducts huma
As a leading defence and security company, we offer solutions that range from the depths of the oceans to high in the sky, on land and in cyberspace, to keep people and society safe. Empowered by our 22,000 talented people, we constantly push the boundaries of technology to create a safer, more sus
.png)
BitcoinWorld Revolutionary: Lagrange Labs Becomes Lockheed Martin Supplier with Cutting-Edge Security Technology In a groundbreaking move...
Lockheed Martin will no longer accept registration of Phone-Based (SMS) OTP for any two-factor authentication via Exostar.
Background. As a follow-up to Cybersecurity Maturity Model Certification: Rulemaking Progress and Readiness for CMMC, beginning November 10,...
Partnership to integrate Google's Gemini AI within Lockheed Martin's air-gapped networks for national security operations.
The American defense corporation Lockheed Martin intends to integrate generative artificial intelligence (AI) tools from the technology...
Phased deployment brings secure, generative AI to unclassified and then classified systems to advance capabilities in aerospace,...
The Cybersecurity & Infrastructure Security Agency (CISA) published ED 26-01 alerting that a nation-state affiliated cyber threat actor has...
Critical zero-day exploits have been discovered in Cisco Adaptive Security Appliances (ASA) and Secure Firewall Threat Defense (FTD)...
Get to Green and Demonstrate Readiness for CMMC. As part of Lockheed Martin's efforts to position its programs Ahead of ReadyTM,...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Lockheed Martin is https://www.lockheedmartin.com.
According to Rankiteo, Lockheed Martin’s AI-generated cybersecurity score is 823, reflecting their Good security posture.
According to Rankiteo, Lockheed Martin currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Lockheed Martin is not certified under SOC 2 Type 1.
According to Rankiteo, Lockheed Martin does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Lockheed Martin is not listed as GDPR compliant.
According to Rankiteo, Lockheed Martin does not currently maintain PCI DSS compliance.
According to Rankiteo, Lockheed Martin is not compliant with HIPAA regulations.
According to Rankiteo,Lockheed Martin is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Lockheed Martin operates primarily in the Defense and Space Manufacturing industry.
Lockheed Martin employs approximately 102,502 people worldwide.
Lockheed Martin presently has no subsidiaries across any sectors.
Lockheed Martin’s official LinkedIn profile has approximately 2,952,468 followers.
Lockheed Martin is classified under the NAICS code 336414, which corresponds to Guided Missile and Space Vehicle Manufacturing.
No, Lockheed Martin does not have a profile on Crunchbase.
Yes, Lockheed Martin maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/lockheed-martin.
As of December 11, 2025, Rankiteo reports that Lockheed Martin has experienced 1 cybersecurity incidents.
Lockheed Martin has an estimated 2,330 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.
Detection and Response: The company detects and responds to cybersecurity incidents through an communication strategy with public denial of data theft claims, assertion of confidence in security systems..
Title: Distributed Denial of Service (DDoS) Attack on Lockheed Martin by Killnet
Description: In August 2022, Lockheed Martin fell victim to a distributed denial of service (DDoS) attack from the hacktivist group Killnet. The group claimed to have also stolen employee data during the attack. Lockheed Martin denied these claims, asserting confidence in their system and data security.
Date Detected: 2022-08
Date Publicly Disclosed: 2022-08
Type: Distributed Denial of Service (DDoS)
Attack Vector: DDoS
Threat Actor: Killnet
Motivation: HacktivismDisruption
Common Attack Types: The most common types of attacks the company has faced is Cyber Attack.

Data Compromised: Employee data (claimed by killnet, denied by lockheed martin)
Brand Reputation Impact: Potential reputational damage due to public claims of data theft
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Employee Data (Claimed) and .

Entity Name: Lockheed Martin
Entity Type: Corporation
Industry: Aerospace, Defense, Security, Advanced Technologies
Location: United States
Size: Large (116,000+ employees as of recent data)

Communication Strategy: Public denial of data theft claims, assertion of confidence in security systems

Type of Data Compromised: Employee data (claimed)
Data Exfiltration: Claimed by Killnet, denied by Lockheed Martin

Investigation Status: Ongoing (as of public disclosure; Lockheed Martin denied data theft claims)
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Public denial of data theft claims and assertion of confidence in security systems.
Last Attacking Group: The attacking group in the last incident was an Killnet.
Most Recent Incident Detected: The most recent incident detected was on 2022-08.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2022-08.
Most Significant Data Compromised: The most significant data compromised in an incident were Employee data (claimed by Killnet, denied by Lockheed Martin) and .
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Employee data (claimed by Killnet and denied by Lockheed Martin).
Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing (as of public disclosure; Lockheed Martin denied data theft claims).
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
