Company Details
mcgrath-rentcorp
942
3,827
53
mgrc.com
0
MCG_1661582
In-progress

McGrath RentCorp Company CyberSecurity Posture
mgrc.comMcGrath might be the best company you’ve never heard of! What started as a small business over 45 years ago has blossomed into a $900M+ industry leader with 1,200+ employees, five dynamic business units, and a strong presence across multiple industries. As a publicly traded company (NASDAQ: MGRC), we’ve built our success on innovation, strong values, and an exceptional team. Through it all, we’ve stayed true to our roots, maintaining a close-knit culture that’s hard to find in companies our size. Our people are the heart of our success, and we value those who bring fresh ideas, build meaningful partnerships, and thrive in a dynamic work environment. If you're looking for a stable, growing company where you can truly make a real difference, we’d love to hear from you!
Company Details
mcgrath-rentcorp
942
3,827
53
mgrc.com
0
MCG_1661582
In-progress
Between 700 and 749

McGrath RentCorp Global Score (TPRM)XXXX

Description: The California Office of the Attorney General reported that McGrath RentCorp experienced a data breach on July 17, 2021. Approximately 11,000 individuals may have had their personal information compromised, including names, addresses, social security numbers, and health-related information. Notification of the incident was issued on December 15, 2021.


No incidents recorded for McGrath RentCorp in 2025.
No incidents recorded for McGrath RentCorp in 2025.
No incidents recorded for McGrath RentCorp in 2025.
McGrath RentCorp cyber incidents detection timeline including parent company and subsidiaries

McGrath might be the best company you’ve never heard of! What started as a small business over 45 years ago has blossomed into a $900M+ industry leader with 1,200+ employees, five dynamic business units, and a strong presence across multiple industries. As a publicly traded company (NASDAQ: MGRC), we’ve built our success on innovation, strong values, and an exceptional team. Through it all, we’ve stayed true to our roots, maintaining a close-knit culture that’s hard to find in companies our size. Our people are the heart of our success, and we value those who bring fresh ideas, build meaningful partnerships, and thrive in a dynamic work environment. If you're looking for a stable, growing company where you can truly make a real difference, we’d love to hear from you!


The Colas Group is a global leader in the construction and maintenance of transport infrastructure. Our mission is to design, build and maintain sustainable transport infrastructure from our local roots, around the world 🌍 Our three main activities are roads (our core business), materials and railw

Saudi Oger Ltd., incorporated in January 1978 under the rules and laws of the Kingdom of Saudi Arabia with its headquarters in Riyadh. Saudi Oger Ltd. is a private company, wholly owned by the Rafic Hariri family. Since its inception, Saudi Oger has become one of the leading Construction; Facilit

Hassan Allam Holding is a leading group with a focus on engineering and construction, and investment and development. The Group operates in diverse sectors including infrastructure, energy, water, industrial, logistics, petrochemical, and complex large-scale projects in Egypt and the MENA region. Th

With 32,500 employees working in 60 countries, Bouygues Construction designs, builds and rehabilitates the infrastructures and buildings that are essential for a sustainable society. All over the world, the teams support the development of low-carbon energy production and public transport infrastruc

Hilti stands for innovation and direct customer relationships. About 34,000 employees around the world, in more than 120 countries, contribute to making our customers’ work more productive, safer and more sustainable. We do this with our hardware, software and service offering. With roughly 280,000

ALEC Holdings, part of the Investment Corporate of Dubai (ICD), is a leading construction and related businesses group operating in the UAE and KSA. The company builds and provides construction solutions that set industry benchmarks for quality, safety, functionality, and aesthetics. ALEC Holdings
.png)
Ex Accenture employee Danielle Hillmer indicted over lying about the implemented security controls in the contractor's cloud platform.
Road Town, British Virgin Islands, December 11th, 2025, CyberNewsWire. 1inch, the leading DeFi ecosystem, has been selected as the exclusive...
The UK government's decision on Tuesday to impose sanctions on two Chinese companies is an irresponsible and unconstructive approach to its...
PRNewswire/ -- CNLABS, a global leader in network interoperability and security testing, today announced the launch of its EU Readiness...
Germany enacts NIS-2 Implementation Act, expanding cybersecurity oversight, executive accountability, and penalties.
If you don't look inside your environment, you can't know its true state – and attackers count on that.
Explore the top cybersecurity predictions for 2026, from AI-driven threats to predictive SOCs and new risks to trust, identity, and critical...
PRNewswire/ -- Netcraft, the global leader in brand protection tools and services, website takedowns and threat disruption, today announced...
Vancouver, British Columbia--(Newsfile Corp. - December 11, 2025) - QSE - Quantum Secure Encryption Corp. CSE:QSE ("QSE" or the "Company")...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of McGrath RentCorp is http://www.mgrc.com/.
According to Rankiteo, McGrath RentCorp’s AI-generated cybersecurity score is 740, reflecting their Moderate security posture.
According to Rankiteo, McGrath RentCorp currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, McGrath RentCorp is not certified under SOC 2 Type 1.
According to Rankiteo, McGrath RentCorp does not hold a SOC 2 Type 2 certification.
According to Rankiteo, McGrath RentCorp is not listed as GDPR compliant.
According to Rankiteo, McGrath RentCorp does not currently maintain PCI DSS compliance.
According to Rankiteo, McGrath RentCorp is not compliant with HIPAA regulations.
According to Rankiteo,McGrath RentCorp is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
McGrath RentCorp operates primarily in the Real Estate and Equipment Rental Services industry.
McGrath RentCorp employs approximately 942 people worldwide.
McGrath RentCorp presently has no subsidiaries across any sectors.
McGrath RentCorp’s official LinkedIn profile has approximately 3,827 followers.
McGrath RentCorp is classified under the NAICS code 53, which corresponds to Real Estate and Rental and Leasing.
Yes, McGrath RentCorp has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/mcgrath-rentcorp.
Yes, McGrath RentCorp maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mcgrath-rentcorp.
As of December 11, 2025, Rankiteo reports that McGrath RentCorp has experienced 1 cybersecurity incidents.
McGrath RentCorp has an estimated 14 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Title: McGrath RentCorp Data Breach
Description: The California Office of the Attorney General reported that McGrath RentCorp experienced a data breach on July 17, 2021. Approximately 11,000 individuals may have had their personal information compromised, including names, addresses, social security numbers, and health-related information. Notification of the incident was issued on December 15, 2021.
Date Detected: 2021-07-17
Date Publicly Disclosed: 2021-12-15
Type: Data Breach
Common Attack Types: The most common types of attacks the company has faced is Breach.

Data Compromised: Names, Addresses, Social security numbers, Health-related information
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Names, Addresses, Social Security Numbers, Health-Related Information and .

Entity Name: McGrath RentCorp
Entity Type: Company
Customers Affected: 11000

Type of Data Compromised: Names, Addresses, Social security numbers, Health-related information
Number of Records Exposed: 11000
Sensitivity of Data: High

Source: California Office of the Attorney General
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney General.
Most Recent Incident Detected: The most recent incident detected was on 2021-07-17.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2021-12-15.
Most Significant Data Compromised: The most significant data compromised in an incident were names, addresses, social security numbers, health-related information and .
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were addresses, health-related information, social security numbers and names.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 110.0.
Most Recent Source: The most recent source of information about an incident is California Office of the Attorney General.
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.