SPHI
Company Details
Linkedin ID:
smphi
Website:
Employees number:
10,001
Number of followers:
114,771
NAICS:
None
Industry Type:
Homepage:
https://smprime.com
IP Addresses:
0
Company ID:
SM _1261185
Scan Status:
In-progress
SM Prime Holdings, Inc. Company CyberSecurity Posture
https://smprime.com
SM Prime Holdings, Inc. (SMPH) is one of the largest integrated property developers in Southeast Asia that offers innovative and sustainable lifestyle cities with the development of malls, residences, offices, hotels and convention centers. It is also the largest, in terms of asset, in the Philippines. SM Prime Holdings, Inc. was incorporated in the Philippines in 1994. They started as a mall developer and operator and grew to be the biggest retail shopping center developer and operator in the Philippines. Currently, it has 72 malls in and outside Metro Manila and 7 shopping malls in China, totaling 9.5 million square meters of Gross Floor Area (GFA). In the Philippines, they have a total of 18,153 tenants and 1,940 tenants in China. SM Prime goes beyond mall development and management through its units and subsidiaries. SM Development Corporation (SMDC) is the residential business component that sells affordable condominium units. SM Prime’s commercial business units, the Commercial Property Group (CPG) is engaged in the development and leasing of office buildings in Metro Manila, as well as the operations and management of buildings and other land holdings such as Mall of Asia Arena (MOA Arena). Its Hotels and Convention Centers business unit develops and manages various hotel and convention centers across the country.
SM Prime Holdings, Inc. A.I CyberSecurity Scoring
SPHI Risk Score (AI oriented)Between 750 and 799
SPHI
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
SPHI Global Score (TPRM)XXXX
SPHI
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
SPHI Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
SPHI Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for SPHI
Incidents vs Real Estate Industry Average (This Year)
No incidents recorded for SM Prime Holdings, Inc. in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for SM Prime Holdings, Inc. in 2025.
Incident Types SPHI vs Real Estate Industry Avg (This Year)
No incidents recorded for SM Prime Holdings, Inc. in 2025.
Incident History — SPHI (X = Date, Y = Severity)
SPHI cyber incidents detection timeline including parent company and subsidiaries
SPHI Company Subsidiaries
SM Prime Holdings, Inc. (SMPH) is one of the largest integrated property developers in Southeast Asia that offers innovative and sustainable lifestyle cities with the development of malls, residences, offices, hotels and convention centers. It is also the largest, in terms of asset, in the Philippines. SM Prime Holdings, Inc. was incorporated in the Philippines in 1994. They started as a mall developer and operator and grew to be the biggest retail shopping center developer and operator in the Philippines. Currently, it has 72 malls in and outside Metro Manila and 7 shopping malls in China, totaling 9.5 million square meters of Gross Floor Area (GFA). In the Philippines, they have a total of 18,153 tenants and 1,940 tenants in China. SM Prime goes beyond mall development and management through its units and subsidiaries. SM Development Corporation (SMDC) is the residential business component that sells affordable condominium units. SM Prime’s commercial business units, the Commercial Property Group (CPG) is engaged in the development and leasing of office buildings in Metro Manila, as well as the operations and management of buildings and other land holdings such as Mall of Asia Arena (MOA Arena). Its Hotels and Convention Centers business unit develops and manages various hotel and convention centers across the country.
Loading...
SPHI Similar Companies
Savills
Savills is a global real estate services provider with a network of more than 40,000 people in over 700 offices across the Americas, Europe, Asia Pacific, Africa and the Middle East. A FTSE 250 company (LON: SVS) headquartered in London, Savills advises corporate, institutional and private clients w
Founded in 1993, Greystar provides world-class service in the residential rental housing industry. Our innovative vertically integrated business model integrates the management, development and investment disciplines of the rental housing industry on international, regional and local levels. This un
Keller Williams Realty, LLC
Austin, Texas-based Keller Williams, the world’s largest real estate franchise by agent count, has more than 1,100 offices and 176,000 agents. The franchise is also No. 1 in units and sales volume in the United States. Since 1983, the company has cultivated an agent-centric, technology-driven, and
Welcome to Coldwell Banker Real Estate LLC, a company founded in 1906 on a commitment to professionalism and customer service which remains the cornerstone of our business philosophy today. We are the nation’s oldest real estate company and our experience has helped make the dream of homeownership a
Lendlease
Lendlease is Australia’s leading real estate business with an international investments platform. We’re city shapers, asset creators and trusted partners. Our deep property experience and bold thinking delivers innovative real estate and investment solutions. Very few organisations can build cit
Shimao Group
Shimao Group has entered the real estate industry since 1989, After more than 30 years of development, the Group has made its layout in more than 100 core development cities across China, involving real estate, commercial, property management, hotel, theme entertainment and culture. Following the n
Berkshire Hathaway HomeServices
Berkshire Hathaway HomeServices is a global residential real estate network with more than 50,000 real estate professionals and nearly 1,600 offices across 4 continents and 13 countries and territories including the U.S., Canada, Mexico, Europe, the Middle East, The Caribbean and India. In 2022, th
IWG is leading the workspace revolution. Our companies help more than 2.5 million people and their businesses to work more productively. We do so by providing a choice of professional, inspiring and collaborative workspaces, communities and services. Our customers are start-ups, small and medium-s
Empire Company Limited
Empire Company Limited (TSX: EMP.A) is a Canadian company headquartered in Stellarton, Nova Scotia. Empire’s key businesses are food retailing, through wholly-owned subsidiary Sobeys Inc., and related real estate. With approximately $30.5 billion in annual sales and $16.5 billion in assets, Empire C
.png)
SPHI CyberSecurity News
November 25, 2025 04:04 PM
SM Prime reports 70% unit take-up at Hamilo Coast
COSTA DEL HAMILO, Inc. (CDHI), a subsidiary of listed SM Prime Holdings, Inc., has sold around 70% of units in its Hamilo Coast development...
September 19, 2025 07:00 AM
SM Prime shapes communities from Bay Area to Batangas and Tarlac
SM Prime Holdings, Inc. (SM Prime), one of Southeast Asia's leading integrated property developers, continues to expand its influence across...
September 18, 2025 07:00 AM
SM Supermalls, PNP Anti-Cybercrime Group join forces to promote public awareness on cybersecurity
SM Supermalls and the Philippine National Police Anti-Cybercrime Group have formalized their partnership.
June 29, 2025 03:20 AM
SM Prime bags top ESG honors at 15th Asian Excellence Awards
SM Prime Holdings Inc. emerged as a big winner at the 15th Asian Excellence Awards held on June 27 in Hong Kong, earning six major accolades for its...
June 27, 2025 07:00 AM
SM Prime prepares for a resilient future
The effects of the 7.7 magnitude earthquakes in Myanmar and the aftershocks in Thailand continue to be seen months after the events.
June 11, 2025 07:00 AM
SM Hotels targets to finish 7 projects by 2029
SM HOTELS and Convention Corp. (SMHCC), the hospitality arm of listed real estate developer SM Prime Holdings, Inc., is expanding its...
February 11, 2025 08:00 AM
SM Prime returns to bond market with P25-B fresh offer
Real estate giant SM Prime Holdings Inc. is all set to return to the debt market this month after pricing its P25-billion bond offer...
February 11, 2025 08:00 AM
SM Prime P25B bond sale begins Feb 12; foreign investors welcome
SM Prime Holdings Inc. is finally opening its bond sale to investors this week through a number of select issue managers, bookrunners and...
December 20, 2024 08:00 AM
SM Prime to raise P7B
SM Prime Holdings Inc. said it will seek to raise P7 billion through a bond sale. The new fund raising represents the second tranche of the...
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
SPHI CyberSecurity History Information
Official Website of SM Prime Holdings, Inc.
The official website of SM Prime Holdings, Inc. is https://smprime.com.
SM Prime Holdings, Inc.’s AI-Generated Cybersecurity Score
According to Rankiteo, SM Prime Holdings, Inc.’s AI-generated cybersecurity score is 787, reflecting their Fair security posture.
How many security badges does SM Prime Holdings, Inc.’ have ?
According to Rankiteo, SM Prime Holdings, Inc. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does SM Prime Holdings, Inc. have SOC 2 Type 1 certification ?
According to Rankiteo, SM Prime Holdings, Inc. is not certified under SOC 2 Type 1.
Does SM Prime Holdings, Inc. have SOC 2 Type 2 certification ?
According to Rankiteo, SM Prime Holdings, Inc. does not hold a SOC 2 Type 2 certification.
Does SM Prime Holdings, Inc. comply with GDPR ?
According to Rankiteo, SM Prime Holdings, Inc. is not listed as GDPR compliant.
Does SM Prime Holdings, Inc. have PCI DSS certification ?
According to Rankiteo, SM Prime Holdings, Inc. does not currently maintain PCI DSS compliance.
Does SM Prime Holdings, Inc. comply with HIPAA ?
According to Rankiteo, SM Prime Holdings, Inc. is not compliant with HIPAA regulations.
Does SM Prime Holdings, Inc. have ISO 27001 certification ?
According to Rankiteo,SM Prime Holdings, Inc. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of SM Prime Holdings, Inc.
SM Prime Holdings, Inc. operates primarily in the Real Estate industry.
Number of Employees at SM Prime Holdings, Inc.
SM Prime Holdings, Inc. employs approximately 10,001 people worldwide.
Subsidiaries Owned by SM Prime Holdings, Inc.
SM Prime Holdings, Inc. presently has no subsidiaries across any sectors.
SM Prime Holdings, Inc.’s LinkedIn Followers
SM Prime Holdings, Inc.’s official LinkedIn profile has approximately 114,771 followers.
NAICS Classification of SM Prime Holdings, Inc.
SM Prime Holdings, Inc. is classified under the NAICS code None, which corresponds to Others.
SM Prime Holdings, Inc.’s Presence on Crunchbase
No, SM Prime Holdings, Inc. does not have a profile on Crunchbase.
SM Prime Holdings, Inc.’s Presence on LinkedIn
Yes, SM Prime Holdings, Inc. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/smphi.
Cybersecurity Incidents Involving SM Prime Holdings, Inc.
As of December 11, 2025, Rankiteo reports that SM Prime Holdings, Inc. has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
SM Prime Holdings, Inc. has an estimated 29,505 peer or competitor companies worldwide.
SM Prime Holdings, Inc. CyberSecurity History Information
How many cyber incidents has SM Prime Holdings, Inc. faced ?
Total Incidents: According to Rankiteo, SM Prime Holdings, Inc. has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at SM Prime Holdings, Inc. ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Risk Information
cvss3
Base: 9.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Description
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Description
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
Risk Information
cvss3
Base: 8.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Description
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.
Risk Information
cvss3
Base: 5.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=smphi' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
