Company Details
mahindraexperience
17,283
692,677
3361
mahindracareers.com
0
MAH_3107864
In-progress

Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] Company CyberSecurity Posture
mahindracareers.comA USD 19.4 billion multinational group based in Mumbai, India, Mahindra provides employment opportunities to over 256,000 people across 100 countries. Mahindra operates in the key industries that drive economic growth, enjoying a leadership position in tractors, utility vehicles, information technology, financial services and vacation ownership. In addition, Mahindra enjoys a strong presence in the agribusiness, aerospace, components, consulting services, defence, energy, industrial equipment, logistics, real estate, retail, steel, commercial vehicles and two wheeler industries. The Automotive and Farm Equipment Business is the largest contributor of the Mahindra Group’s revenue. With 30,000+ full time employees spread across 20 locations, Mahindra has a strong presence in India. Further it propels an entire manufacturing ecosystem of 1,200 suppliers and 3,500 dealers, thereby creating direct and indirect employment for over 200,000 individuals. Our Farm Equipment business is the number 1 tractor company in the world by volume. In addition to our focus on maintaining a leading position in the core tractor mechanization business, we strive to deliver on our aspiration of “Farm Tech Prosperity” thus enabling our customers and our communities to RISE. Our Automotive business is a full-range mobility player with a presence in almost every segment of the automobile industry. Our product portfolio ranges from world class SUVs, premium luxury UVs, sedans, pick-ups, light, medium and heavy commercial vehicles to three-wheelers. All these cater to a diverse customer base spanning across rural and semi-urban customers. Leveraging our growing dominance, domestic & international market penetration and recent strategic acquisitions, we aim to provide world class exeperience to our customers and team members.
Company Details
mahindraexperience
17,283
692,677
3361
mahindracareers.com
0
MAH_3107864
In-progress
Between 800 and 849

MML[FEB Global Score (TPRM)XXXX

Description: Singapore’s privacy watchdog fined Tech Mahindra $10,000 after it failed to protect the personal details of 2.78 million Singtel customers from unauthorised changes. Because this incident inadvertently caused the personal data of one customer to be leaked online. The incident was reported after the customers noticed someone else’s NRIC number, account number and billing address on the My Singtel app and the telco’s website.


No incidents recorded for Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] in 2025.
No incidents recorded for Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] in 2025.
No incidents recorded for Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] in 2025.
MML[FEB cyber incidents detection timeline including parent company and subsidiaries

A USD 19.4 billion multinational group based in Mumbai, India, Mahindra provides employment opportunities to over 256,000 people across 100 countries. Mahindra operates in the key industries that drive economic growth, enjoying a leadership position in tractors, utility vehicles, information technology, financial services and vacation ownership. In addition, Mahindra enjoys a strong presence in the agribusiness, aerospace, components, consulting services, defence, energy, industrial equipment, logistics, real estate, retail, steel, commercial vehicles and two wheeler industries. The Automotive and Farm Equipment Business is the largest contributor of the Mahindra Group’s revenue. With 30,000+ full time employees spread across 20 locations, Mahindra has a strong presence in India. Further it propels an entire manufacturing ecosystem of 1,200 suppliers and 3,500 dealers, thereby creating direct and indirect employment for over 200,000 individuals. Our Farm Equipment business is the number 1 tractor company in the world by volume. In addition to our focus on maintaining a leading position in the core tractor mechanization business, we strive to deliver on our aspiration of “Farm Tech Prosperity” thus enabling our customers and our communities to RISE. Our Automotive business is a full-range mobility player with a presence in almost every segment of the automobile industry. Our product portfolio ranges from world class SUVs, premium luxury UVs, sedans, pick-ups, light, medium and heavy commercial vehicles to three-wheelers. All these cater to a diverse customer base spanning across rural and semi-urban customers. Leveraging our growing dominance, domestic & international market penetration and recent strategic acquisitions, we aim to provide world class exeperience to our customers and team members.


Delphi Product & Service Solutions is Delphi’s aftermarket channel. In the aftermarket, our technologies cover every aspect of today’s vehicles, from brakes to steering, air conditioning to ignition, engine management to fuel systems — whether the vehicle is a hybrid, or powered by gasoline or diese

Sumitomo Electric Bordnetze SE (SEBN) is a global automotive supplier with over 36,000 employees in 13 countries. SEBN is part of the Japanese group Sumitomo Electric Industries, which has 380 subsidiaries in various industries worldwide. The more than 400-year-old Sumitomo Electric Group employs 28
With its four brands BMW, MINI, Rolls-Royce and BMW Motorrad, the BMW Group is the world’s leading pre-mium manufacturer of automobiles and motorcycles and also provides premium financial services. The BMW Group production network comprises over 30 production sites worldwide; the company has a globa

TVS Motor Company is a reputed two and three-wheeler manufacturer globally, championing progress through Mobility with a focus on sustainability. Rooted in our 100-year legacy of Trust, Value, and Passion for Customers and Exactness, we take pride in making internationally aspirational products of t
Iveco Group N.V. (MI: IVG) is the home of unique people and brands that power your business and mission to advance a more sustainable society. The seven brands are each a major force in its specific business: IVECO, a pioneering commercial vehicles brand that designs, manufactures, and markets heavy
As a global product leader for over 130 years, we deliver innovative and sustainable mobility solutions. Guided by our commitment to inclusion, integrity, excellence, responsibility and collaboration—and our pledge to reach carbon neutrality by 2035—we’re leading the automotive industry to a future

We build International trucks and engines and IC Bus® school and commercial buses that are as tough and as smart as the people who drive them. Our solutions deliver greater uptime and productivity to fleets across North America. We also develop Fleetrite® aftermarket parts. In everything we do, our

Company profile GRAMMER AG, which has its head office in Ursensollen, specializes in the development and production of complex components and systems for automotive interiors as well as suspension driver and passenger seats for onroad and offroad vehicles. In the Automotive product area, the Company
Established in 1995, BYD is a top high-tech enterprise in China specializing in IT, automobile, and new energy.BYD is the largest supplier of rechargeable batteries in the globe, and has the largest market share for Nickel-cadmium batteries, handset Li-ion batteries, cell-phone chargers and keypads
.png)
VinFast, the Vietnamese electric vehicle manufacturer, has announced the appointment of Tapan Kumar Ghosh as the Chief Executive Officer.
Mahindra Tractors partners with Maharashtra Govt to launch a Skill Development Centre in Gadchiroli, empowering rural youth.
JLR operates a complex global IT infrastructure spanning 128 sites worldwide. The company has undergone significant digital transformation...
Welspun Enterprises Ltd has announced the appointment of Anurag Garg as Senior Vice President & Chief Information Officer (CIO).
Mahindra & Mahindra Ltd, India's premier SUV manufacturer, has unveiled its Global Vision 2027, introducing the all-new NU_IQ platform — a...
This is an undeniable fact. Most investors who have Rs. 1 lakh to invest would prefer to buy 5000 shares of a small-cap company rather than...
The Mahindra Group began with the steel trading business seven decades ago and now has become a brand that traverses nations and sectors.
New Delhi: Haryana-based farm machinery testing institute NRFMTTI on Friday signed an agreement with tractor maker Mahindra and Mahindra Ltd...
Mumbai: NXP Semiconductors signed an Memorandum of Understanding with Mahindra & Mahindra Ltd., a pioneer auto and farm equipment player in...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] is http://jobs.mahindracareers.com.
According to Rankiteo, Mahindra and Mahindra Limited [Automotive and Farm Equipment Business]’s AI-generated cybersecurity score is 805, reflecting their Good security posture.
According to Rankiteo, Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] is not certified under SOC 2 Type 1.
According to Rankiteo, Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] is not listed as GDPR compliant.
According to Rankiteo, Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] does not currently maintain PCI DSS compliance.
According to Rankiteo, Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] is not compliant with HIPAA regulations.
According to Rankiteo,Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] operates primarily in the Motor Vehicle Manufacturing industry.
Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] employs approximately 17,283 people worldwide.
Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] presently has no subsidiaries across any sectors.
Mahindra and Mahindra Limited [Automotive and Farm Equipment Business]’s official LinkedIn profile has approximately 692,677 followers.
Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.
No, Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] does not have a profile on Crunchbase.
Yes, Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mahindraexperience.
As of December 11, 2025, Rankiteo reports that Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] has experienced 1 cybersecurity incidents.
Mahindra and Mahindra Limited [Automotive and Farm Equipment Business] has an estimated 12,645 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Data Leak.
Total Financial Loss: The total financial loss from these incidents is estimated to be $10 thousand.
Title: Tech Mahindra Data Leak Incident
Description: Singapore’s privacy watchdog fined Tech Mahindra $10,000 after it failed to protect the personal details of 2.78 million Singtel customers from unauthorised changes. The incident inadvertently caused the personal data of one customer to be leaked online. The incident was reported after the customers noticed someone else’s NRIC number, account number, and billing address on the My Singtel app and the telco’s website.
Type: Data Leak
Attack Vector: Unauthorized changes
Common Attack Types: The most common types of attacks the company has faced is Data Leak.

Financial Loss: Fined $10,000
Data Compromised: Personal details of 2.78 million Singtel customers
Systems Affected: My Singtel appSingtel’s website
Average Financial Loss: The average financial loss per incident is $10.00 thousand.
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Nric Number, Account Number, Billing Address and .

Entity Name: Singtel
Entity Type: Telecommunications Company
Industry: Telecommunications
Location: Singapore
Customers Affected: 2.78 million

Type of Data Compromised: Nric number, Account number, Billing address
Number of Records Exposed: 2.78 million
Personally Identifiable Information: NRIC number, Account number, Billing address

Fines Imposed: $10,000
Highest Financial Loss: The highest financial loss from an incident was Fined $10,000.
Most Significant Data Compromised: The most significant data compromised in an incident was Personal details of 2.78 million Singtel customers.
Most Significant System Affected: The most significant system affected in an incident was My Singtel appSingtel’s website.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach was Personal details of 2.78 million Singtel customers.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 2.8M.
Highest Fine Imposed: The highest fine imposed for a regulatory violation was $10,000.
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
