ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

At National Bank, we believe in the potential of each individual, and that even the smallest gestures can make a big difference. When we help others accomplish their projects, we help empower them and the community at large. We try to make a difference through innovation, but above all, by putting people first. By taking the time to listen and letting our actions speak for themselves. By remaining bold and passionate. By developing lasting relationships as partners and allies. Together we can achieve great things and create a positive impact. Want to learn more about us? For advice on your personal finances, visit: nbc.ca/advice For advice on your business, visit: nbc.ca/business For career opportunities, visit: jobs.nbc.ca For all the latest news, visit: nbc.ca/news By clicking "Follow" above, you may receive communications from National Bank, either in your LinkedIn inbox or by other means via LinkedIn, about products and services that could interest you. Learn more at: www.nbc.ca/socialnetworks.

National Bank of Canada A.I CyberSecurity Scoring

NBC

Company Details

Linkedin ID:

national-bank-of-canada

Employees number:

19,281

Number of followers:

251,625

NAICS:

52211

Industry Type:

Banking

Homepage:

bnc.ca

IP Addresses:

0

Company ID:

NAT_2479834

Scan Status:

In-progress

AI scoreNBC Risk Score (AI oriented)

Between 750 and 799

https://images.rankiteo.com/companyimages/national-bank-of-canada.jpeg
NBC Banking
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreNBC Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/national-bank-of-canada.jpeg
NBC Banking
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

NBC Company CyberSecurity News & History

Past Incidents
0
Attack Types
0
No data available
Ailogo

NBC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for NBC

Incidents vs Banking Industry Average (This Year)

No incidents recorded for National Bank of Canada in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for National Bank of Canada in 2025.

Incident Types NBC vs Banking Industry Avg (This Year)

No incidents recorded for National Bank of Canada in 2025.

Incident History — NBC (X = Date, Y = Severity)

NBC cyber incidents detection timeline including parent company and subsidiaries

NBC Company Subsidiaries

SubsidiaryImage

At National Bank, we believe in the potential of each individual, and that even the smallest gestures can make a big difference. When we help others accomplish their projects, we help empower them and the community at large. We try to make a difference through innovation, but above all, by putting people first. By taking the time to listen and letting our actions speak for themselves. By remaining bold and passionate. By developing lasting relationships as partners and allies. Together we can achieve great things and create a positive impact. Want to learn more about us? For advice on your personal finances, visit: nbc.ca/advice For advice on your business, visit: nbc.ca/business For career opportunities, visit: jobs.nbc.ca For all the latest news, visit: nbc.ca/news By clicking "Follow" above, you may receive communications from National Bank, either in your LinkedIn inbox or by other means via LinkedIn, about products and services that could interest you. Learn more at: www.nbc.ca/socialnetworks.

Loading...
similarCompanies

NBC Similar Companies

PT Bank Mandiri (Persero) Tbk.

Bank Mandiri was established on 2 October 1998, as part of the bank restructuring program of the Government of Indonesia. In July 1999, four state-owned banks - Bank Bumi Daya, Bank Dagang Negara, Bank Exim and Bapindo - were amalgamated into Bank Mandiri. The history of these four banks can be trac

Banamex

En Banamex una palabra nos ha definido durante nuestra historia: Estar. Estar es acompañar. Estar es avanzar juntos. Acompañar para forjar relaciones auténticas, duraderas, significativas, que nos den confianza y nos impulsen a alcanzar aquello que es importante para ti, para nosotros, para todos.

Bank of India

Welcome to Bank of India's official LinkedIn page! Join us & stay tuned to learn about our products, exciting offers & latest happenings. Bank of India was founded on 7th September, 1906 by a group of eminent business professionals from Mumbai. The Bank was under private ownership and control till J

Yapı Kredi

Yapı Kredi has been sustainably strengthening its market positioning in the sector since its establishment in 1944 through a customer-centric approach and focus on innovation. Yapı Kredi is the 3rd largest private bank in Turkey with total assets worth TL 411 billion as of the end of 2019. Constantl

UniCredit exists to empower communities to progress. To deliver for all our stakeholders across Europe and unlock the potential within each individual and community we serve. We are a pan-European bank: our 13 banks across the continent work together as one, leveraging the strength of the collectiv

Handelsbanken

We are Europe's safest commercial bank, with roots in local communities throughout Sweden, the Netherlands, Norway, and the UK. Across a range of digital and physical meeting places, our branch teams offer ‘up close and personal’ financial advice and solutions, based on customers’ individual needs.

Türkiye İş Bankası

In the nearly 100 years since its founding by the Great Leader Mustafa Kemal Atatürk on August 26, 1924, İşbank has undertaken various roles and made significant contributions to the development of our country in many fields, especially in industry and trade. İşbank offers products and services to

DenizBank

In 1997, DenizBank was acquired by the Zorlu Holding in the form of a banking license from the Privatization Administration. Undergoing three shareholder changes and done public offering in its short history, the Bank was acquired in October 2006 by Dexia, one of the leading financial groups of Euro

Meezan Bank Limited

Meezan Bank, Pakistan's first and largest Islamic bank, is one of the fastest growing financial institutions in the banking sector of the country. With its Vision of establishing ‘Islamic banking as banking of first choice’ – the Bank commenced operations in 2002, after being issued the first-ever I

newsone

NBC CyberSecurity News

November 19, 2025 08:00 AM
Safe Online Holiday Shopping

Stay safe online with these tips for doing your holiday shopping online safely – a complete guide for 2025!

November 04, 2025 08:00 AM
Dominic Paradis adds enterprise technology and resilience to his role at National Bank

National Bank's Dominic Paradis has added to his responsibilities and taken on the new designation of executive vice-president and general...

October 30, 2025 07:00 AM
2026 banking and capital markets outlook

2026 is pivotal for US banks as they navigate macro headwinds, stablecoin disruption, scaling AI, fragmented data, and financial crime.

October 29, 2025 07:00 AM
National Bank refreshes executive ranks as longtime VP Lucie Blanchet retires

National Bank has announced a series of executive changes effective January 1, 2026, as it looks to accelerate growth across Canada.

October 24, 2025 07:11 PM
Carleton Takes Second at National CyberSCI Cyber Security Challenge After Sweeping Regional Competition

To stop a hacker, you need to think like one. And the CyberSCI Cyber Security Challenge asks competitors to put themselves in a hacking state of mind.

October 23, 2025 07:00 AM
Bill C-8: A new era for cyber security and compliance in Canada’s vital sectors

Bill C-8 marks a pivotal shift in Canada's cyber security landscape, introducing sweeping obligations for operators of vital infrastructure.

October 01, 2025 07:00 AM
‘Don’t underestimate the threat:’ National cyber security program warns Canadian small businesses

Cyber crime is at an all-time high globally but many small and medium sized Canadian businesses may be over confident in their ability to...

September 26, 2025 07:00 AM
Federal cyber agency warns of 'serious and urgent' attack on tech used by remote workers

Government cyber agencies around the world are rushing to clamp down on what appears to be an advanced and sophisticated espionage campaign...

September 24, 2025 07:00 AM
RBC employee charged for allegedly accessing Carney's banking information

The RCMP has charged an Ottawa Royal Bank of Canada employee after he allegedly accessed Prime Minister Mark Carney's banking profile as...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

NBC CyberSecurity History Information

Official Website of National Bank of Canada

The official website of National Bank of Canada is http://www.bnc.ca.

National Bank of Canada’s AI-Generated Cybersecurity Score

According to Rankiteo, National Bank of Canada’s AI-generated cybersecurity score is 783, reflecting their Fair security posture.

How many security badges does National Bank of Canada’ have ?

According to Rankiteo, National Bank of Canada currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does National Bank of Canada have SOC 2 Type 1 certification ?

According to Rankiteo, National Bank of Canada is not certified under SOC 2 Type 1.

Does National Bank of Canada have SOC 2 Type 2 certification ?

According to Rankiteo, National Bank of Canada does not hold a SOC 2 Type 2 certification.

Does National Bank of Canada comply with GDPR ?

According to Rankiteo, National Bank of Canada is not listed as GDPR compliant.

Does National Bank of Canada have PCI DSS certification ?

According to Rankiteo, National Bank of Canada does not currently maintain PCI DSS compliance.

Does National Bank of Canada comply with HIPAA ?

According to Rankiteo, National Bank of Canada is not compliant with HIPAA regulations.

Does National Bank of Canada have ISO 27001 certification ?

According to Rankiteo,National Bank of Canada is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of National Bank of Canada

National Bank of Canada operates primarily in the Banking industry.

Number of Employees at National Bank of Canada

National Bank of Canada employs approximately 19,281 people worldwide.

Subsidiaries Owned by National Bank of Canada

National Bank of Canada presently has no subsidiaries across any sectors.

National Bank of Canada’s LinkedIn Followers

National Bank of Canada’s official LinkedIn profile has approximately 251,625 followers.

NAICS Classification of National Bank of Canada

National Bank of Canada is classified under the NAICS code 52211, which corresponds to Commercial Banking.

National Bank of Canada’s Presence on Crunchbase

No, National Bank of Canada does not have a profile on Crunchbase.

National Bank of Canada’s Presence on LinkedIn

Yes, National Bank of Canada maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/national-bank-of-canada.

Cybersecurity Incidents Involving National Bank of Canada

As of December 11, 2025, Rankiteo reports that National Bank of Canada has not experienced any cybersecurity incidents.

Number of Peer and Competitor Companies

National Bank of Canada has an estimated 6,988 peer or competitor companies worldwide.

National Bank of Canada CyberSecurity History Information

How many cyber incidents has National Bank of Canada faced ?

Total Incidents: According to Rankiteo, National Bank of Canada has faced 0 incidents in the past.

What types of cybersecurity incidents have occurred at National Bank of Canada ?

Incident Types: The types of cybersecurity incidents that have occurred include .

Incident Details

What are the most common types of attacks the company has faced ?

Additional Questions

cve

Latest Global CVEs (Not Company-Specific)

Description

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.

Risk Information
cvss3
Base: 9.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Description

Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.

Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Description

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.

Risk Information
cvss3
Base: 8.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Description

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Risk Information
cvss3
Base: 5.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=national-bank-of-canada' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge