Company Details
northern-trust
29,579
613,513
52
northerntrust.com
0
NOR_2584128
In-progress

Northern Trust Company CyberSecurity Posture
northerntrust.comAs a global leader in innovative wealth management, asset servicing and investment solutions, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families and institutions by remaining true to our enduring principles of service, expertise and integrity. A globally recognized Fortune 500 Company in continuous operation since 1889, we’ve built a legacy of empowering clients to reach their goals with confidence. Since our roots as a trust bank, we’ve grown to a global presence with more than 24,000 employees in more than 20 countries and across five core business units: Wealth Management Asset Management Asset Servicing Technology Corporate Functions Join a Team That’s Made for Greater At Northern Trust, we refer to our employees as partners – with good reason. We understand that relationships are the key to our success. Here you’ll join a diverse and inclusive team of innovators with the drive to challenge the way things have always been done. Instead of choosing between a dynamic career and work-life balance, enjoy working with a team that supports your goals in the office and at home. We’ll help you get where you want to go without sacrificing what matters most to you. As of December 31 2024, Northern Trust had: $16.8 trillion assets under custody/administration $13.3 trillion in assets under custody $1.6 trillion in assets under management $156 billion in banking assets Stay connected with us: NT Careers Facebook - https://www.facebook.com/ntcareers Northern Trust Instagram - https://www.instagram.com/northerntrustcompany/
Company Details
northern-trust
29,579
613,513
52
northerntrust.com
0
NOR_2584128
In-progress
Between 750 and 799

Northern Trust Global Score (TPRM)XXXX

Description: The California Office of the Attorney General reported that Northern Trust experienced a data breach on May 17, 2014. The breach involved the inadvertent disclosure of personal information, including names, addresses, Social Security numbers, and benefits account numbers of an unknown number of individuals. The notification was provided on July 29, 2014.
Description: Northern Trust Corporation suffered a data breach after an unauthorized party gained access to sensitive consumer data contained on its network. The breach compromised the personal details and the account numbers of certain individuals. Northern Trust sent out data breach letters to all affected parties and informed them of the incident and notified them to protect themselves from identity theft and other frauds.


No incidents recorded for Northern Trust in 2025.
No incidents recorded for Northern Trust in 2025.
No incidents recorded for Northern Trust in 2025.
Northern Trust cyber incidents detection timeline including parent company and subsidiaries

As a global leader in innovative wealth management, asset servicing and investment solutions, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families and institutions by remaining true to our enduring principles of service, expertise and integrity. A globally recognized Fortune 500 Company in continuous operation since 1889, we’ve built a legacy of empowering clients to reach their goals with confidence. Since our roots as a trust bank, we’ve grown to a global presence with more than 24,000 employees in more than 20 countries and across five core business units: Wealth Management Asset Management Asset Servicing Technology Corporate Functions Join a Team That’s Made for Greater At Northern Trust, we refer to our employees as partners – with good reason. We understand that relationships are the key to our success. Here you’ll join a diverse and inclusive team of innovators with the drive to challenge the way things have always been done. Instead of choosing between a dynamic career and work-life balance, enjoy working with a team that supports your goals in the office and at home. We’ll help you get where you want to go without sacrificing what matters most to you. As of December 31 2024, Northern Trust had: $16.8 trillion assets under custody/administration $13.3 trillion in assets under custody $1.6 trillion in assets under management $156 billion in banking assets Stay connected with us: NT Careers Facebook - https://www.facebook.com/ntcareers Northern Trust Instagram - https://www.instagram.com/northerntrustcompany/


SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 150 offices and 86,000 employees worldwide
BlackRock is a global asset manager and technology provider dedicated to helping more and more people experience financial well-being. We help millions of people invest to build savings that serve them throughout their lives. We always start with our clients’ needs and look to offer them more qua

In a changing world, we aim at anticipating transformation and driving your company for success. We are convinced to have the expertise and networks you need to develop your business. BNP Paribas Corporate and Institutional Banking is a leading global financial partner, offering you a wide range of
Fidelity’s mission is to strengthen the financial well-being of our customers and deliver better outcomes for the clients and businesses we serve. Fidelity’s strength comes from the scale of our diversified, market-leading financial services businesses that serve individuals, families, employers, we

Sahara India was founded in 1978 and now has book value of gross assets of more than USD 63 billion. Today, the Sahara Group is a major business conglomerate in India with diversified business interest including financial services, housing finance, mutual funds, life insurance, City development, rea

Our purpose is Helping Britain Prosper. We do this by creating a more sustainable and inclusive future for people and businesses, shaping finance as a force for good. We're part of an ever-changing industry and are currently on a journey to shape the financial services of the future, whilst support

Fidelity National Financial, Inc. (NYSE: FNF) is a leading provider of title insurance and transaction services to the real estate and mortgage industries. Ranked #359 on the FORTUNE 500(r) list for 2023, FNF is the nation's largest title insurance company through our title insurance underwriters (F

Nomura is a global financial services group with an integrated network spanning approximately 30 countries and regions. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its three business divisions: Wealth Management, Inves

NN Group is an international financial services company, active in 10 countries, with a strong presence in a number of European countries and Japan. Our roots lie in the Netherlands, with a rich history of more than 175 years. With our 15,000 employees, NN Group provides retirement services, pensio
.png)
1800 people employed across two locations: Dublin and Limerick Irish-based teams support the global business across many functions.
Meliosa O'Caoimh is bracing herself for the take-off of the funds industry in Ireland. The Ireland country head of Northern Trust,...
Founded in Chicago in 1889, Northern Trust has a global presence with offices in 24 U.S. states and Washington, D.C., and across 22...
Northern Trust to provide ops outsourcing, fund administration and risk analytics to Avanda under MAS's S$5B EQDP (US$3.8B) extending...
The Northern Trust All Funds Over $100 Million plan universe returned a median 4.3% for the third quarter.
Saudi Arabia's Public Investment Fund has expanded its relationships with BlackRock and Northern Trust Asset Management, the sovereign...
Northern Ireland can advance both AI for cyber security and cyber security for AI – two interdependent domains critical to safeguarding...
Northern Trust beat Wall Street expectations for third-quarter profit on Wednesday as it earned higher fees after rallying markets boosted...
Northern Trust reported assets under management of $1.77 trillion in the third quarter, up 4.4% from the second quarter.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Northern Trust is https://www.northerntrust.com/about-us/careers.
According to Rankiteo, Northern Trust’s AI-generated cybersecurity score is 773, reflecting their Fair security posture.
According to Rankiteo, Northern Trust currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Northern Trust is not certified under SOC 2 Type 1.
According to Rankiteo, Northern Trust does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Northern Trust is not listed as GDPR compliant.
According to Rankiteo, Northern Trust does not currently maintain PCI DSS compliance.
According to Rankiteo, Northern Trust is not compliant with HIPAA regulations.
According to Rankiteo,Northern Trust is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Northern Trust operates primarily in the Financial Services industry.
Northern Trust employs approximately 29,579 people worldwide.
Northern Trust presently has no subsidiaries across any sectors.
Northern Trust’s official LinkedIn profile has approximately 613,513 followers.
Northern Trust is classified under the NAICS code 52, which corresponds to Finance and Insurance.
No, Northern Trust does not have a profile on Crunchbase.
Yes, Northern Trust maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/northern-trust.
As of December 11, 2025, Rankiteo reports that Northern Trust has experienced 2 cybersecurity incidents.
Northern Trust has an estimated 30,346 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Detection and Response: The company detects and responds to cybersecurity incidents through an communication strategy with data breach letters sent to affected parties..
Title: Northern Trust Corporation Data Breach
Description: Northern Trust Corporation suffered a data breach after an unauthorized party gained access to sensitive consumer data contained on its network. The breach compromised the personal details and the account numbers of certain individuals. Northern Trust sent out data breach letters to all affected parties and informed them of the incident and notified them to protect themselves from identity theft and other frauds.
Type: Data Breach
Title: Northern Trust Data Breach
Description: The California Office of the Attorney General reported that Northern Trust experienced a data breach on May 17, 2014. The breach involved the inadvertent disclosure of personal information, including names, addresses, Social Security numbers, and benefits account numbers of an unknown number of individuals. The notification was provided on July 29, 2014.
Date Detected: 2014-05-17
Date Publicly Disclosed: 2014-07-29
Type: Data Breach
Attack Vector: Inadvertent Disclosure
Common Attack Types: The most common types of attacks the company has faced is Breach.

Data Compromised: Personal details, Account numbers
Identity Theft Risk: True

Data Compromised: Names, Addresses, Social security numbers, Benefits account numbers
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personal Details, Account Numbers, , Names, Addresses, Social Security Numbers, Benefits Account Numbers and .

Entity Name: Northern Trust Corporation
Entity Type: Financial Services
Industry: Finance

Entity Name: Northern Trust
Entity Type: Financial Institution
Industry: Finance
Location: California

Communication Strategy: Data breach letters sent to affected parties

Type of Data Compromised: Personal details, Account numbers

Type of Data Compromised: Names, Addresses, Social security numbers, Benefits account numbers
Sensitivity of Data: High

Source: California Office of the Attorney General
Date Accessed: 2014-07-29
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney GeneralDate Accessed: 2014-07-29.
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Data Breach Letters Sent To Affected Parties.

Customer Advisories: Protect themselves from identity theft and other frauds
Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Protect Themselves From Identity Theft And Other Frauds and .
Most Recent Incident Detected: The most recent incident detected was on 2014-05-17.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2014-07-29.
Most Significant Data Compromised: The most significant data compromised in an incident were personal details, account numbers, , names, addresses, Social Security numbers, benefits account numbers and .
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were personal details, names, account numbers, Social Security numbers, addresses and benefits account numbers.
Most Recent Source: The most recent source of information about an incident is California Office of the Attorney General.
Most Recent Customer Advisory: The most recent customer advisory issued was an Protect themselves from identity theft and other frauds.
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.