Gunnebo Company Cyber Security Posture
gunnebo.comGunnebo is a global leader in security solutions, offering innovative products and services to control the flow of people and to protect valuables from burglary, fire and explosion. Gunnebo is owned by Altor and Stena Adactum. Through our Business Units Entrance Control and Safe Storage, we offer solutions to customers primarily in public transport, public and commercial buildings, banking, high-end retail, and in industrial and high-risk sites. We operate worldwide through our 3,400 employees, 25 country locations and 10 production facilities to serve customers in over 100 markets. We believe that our diverse, respectful and inclusive working environment is critical to unlocking the full potential of our international workforce, driving collaboration and innovation, and understanding our customers’ varied and unique needs. We represent a global community of dedicated people who are passionate about creating a safer world.
Gunnebo Company Details
gunnebo
1555 employees
21654
561
Security and Investigations
gunnebo.com
Scan still pending
GUN_1029687
In-progress
Gunnebo Risk Score (AI oriented)Between 900 and 1000
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.
Gunnebo Global Score.png)
Gunnebo Company Scoring based on AI Models
| Model Name | Date | Description | Current Score Difference | Score |
|---|---|---|---|---|
| AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 900 and 1000 |
Gunnebo Company Cyber Security News & History
| Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
|---|---|---|---|---|---|---|---|
| Gunnebo | Data Leak | 85 | 3 | 10/2020 | GUN1498523 | Link | |
Rankiteo Explanation : Attack with significant impact with internal employee data leaksDescription: One or more hackers took data from security company Gunnebo totaling 19 terabytes and about 38,000 files. The company claimed that they are reviewing the information and, in cases where there is sensitive information, they are getting in touch with the client. The documents that were leaked include information on the security measures for the Swedish parliament and private plans for the Swedish Tax Agency's new office on the outskirts of Stockholm. The business added that it had determined the attack to be well-planned, but it did not specify what information had been compromised. | |||||||
Gunnebo Company Subsidiaries
Gunnebo is a global leader in security solutions, offering innovative products and services to control the flow of people and to protect valuables from burglary, fire and explosion. Gunnebo is owned by Altor and Stena Adactum. Through our Business Units Entrance Control and Safe Storage, we offer solutions to customers primarily in public transport, public and commercial buildings, banking, high-end retail, and in industrial and high-risk sites. We operate worldwide through our 3,400 employees, 25 country locations and 10 production facilities to serve customers in over 100 markets. We believe that our diverse, respectful and inclusive working environment is critical to unlocking the full potential of our international workforce, driving collaboration and innovation, and understanding our customers’ varied and unique needs. We represent a global community of dedicated people who are passionate about creating a safer world.
Access Data Using Our API
Get company history
Rapid.png)
Gunnebo Cyber Security News
Gunnebo showcases at ISC West 2025: Advanced control tech
Discover Gunnebo's advanced entrance control tech at ISC West 2025 in Las Vegas. Experience smart solutions featuring AI, touchless tech, and high-security ...
Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo
Earlier this week, Swedish news agency Dagens Nyheter confirmed that hackers recently published online at least 38,000 documents stolen from ...
Customer information from Swedish security firm Gunnebo leaked by hackers
Swedish security firm Gunnebo said on Tuesday it was in contact with customers after hackers had released sensitive information about their accounts.
John Afzelius joins Gunnebo as Chief Financial Officer
Gunnebo Group has appointed John Afzelius as Chief Financial Officer. He starts his new position as of January 2023, taking over from Åke ...
OpenGate Buys European Security Business From Gunnebo AB
OpenGate Capital acquired a division of Swedish security company Gunnebo AB and renamed the business Fichet Security Solutions.
Data breach at Swedish security company leaks 38,000 sensitive documents
Around 38,000 files have been publicly exposed this week as the result of a “well organized” cyber-attack, which happened back in August.
Gunnebo SpeedStile FLs Secure Fibra's Real Estate
With multiple LEED-certified buildings in its portfolio, the company prioritizes solutions that enhance security, efficiency, and environmental responsibility.
With Local Acquisition, International Security Firm Launches New Cash Management Business
Canadian security giant GardaWorld has acquired Carrollton-based Tidel and inked a definitive agreement to buy the cash management business of Sweden's Gunnebo ...
Gunnebo enhances physical security with DG Concept and Diadem acquisition
Gunnebo Entrance Control has announced its acquisition of DG Concept and Diadem, a French entrance control, design, installation, ...
Gunnebo Similar Companies
G4S
G4S is a leading security and facility services company that provides proactive security services and cutting-edge smart technology to deliver tailored, integrated security solutions that allow clients to focus on their core business. Through a global workforce of approximately 800,000 people, we le
Gendarmerie Nationale
Force humaine de près de 100 000 hommes et femmes placée sous l’autorité du ministère de l’Intérieur, la Gendarmerie nationale est une institution militaire garante de la sécurité et de la paix de nos concitoyens, et de la protection de leurs biens. Elle assure des missions de police judi
CHECKMATE SERVICES PVT LTD
CSPL is Pan India company with presence in almost all states and in some neighbouring countries also. We have our Corporate Office at Vadodara, our MD is Mr Vikram Mahurkar. We have our Branches in all States. We carry out training of 15 days for all guards at our Training School located at
ORIONSECURE
At ORIONSECURE, we are a leading provider of both Traditional and New-Age Security Services. ORIONSECURE is the flagship & holding company of the larger ORION Group. At ORION we protect and support your people, premises and assets through our end to end solutions for : - Security Services - Facilit
Liderman
“Somos la empresa de seguridad de mayor prestigio en el Perú" Comenzamos en el año 1989, con solo 4 hombres de Seguridad, que creyeron en nuestro estilo de liderazgo y decidieron apostar por la PASIÓN, darle SENTIDO de PROPÓSITO a nuestras vidas y hacer algo DIFERENTE en el sector. Durante estos
GardaWorld
GardaWorld is the world’s largest privately-owned security services company, offering cash services, physical and specialized security solutions, and with our Crisis24 portal, the dissemination of verified information related to international security. GardaWorld est la plus importante entreprise
Frequently Asked Questions (FAQ) on Cybersecurity Incidents
Gunnebo CyberSecurity History Information
Total Incidents: According to Rankiteo, Gunnebo has faced 1 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include ['Data Leak'].
Total Financial Loss: The total financial loss from these incidents is estimated to be {total_financial_loss}.
Cybersecurity Posture: The company's overall cybersecurity posture is described as Gunnebo is a global leader in security solutions, offering innovative products and services to control the flow of people and to protect valuables from burglary, fire and explosion. Gunnebo is owned by Altor and Stena Adactum. Through our Business Units Entrance Control and Safe Storage, we offer solutions to customers primarily in public transport, public and commercial buildings, banking, high-end retail, and in industrial and high-risk sites. We operate worldwide through our 3,400 employees, 25 country locations and 10 production facilities to serve customers in over 100 markets. We believe that our diverse, respectful and inclusive working environment is critical to unlocking the full potential of our international workforce, driving collaboration and innovation, and understanding our customers’ varied and unique needs. We represent a global community of dedicated people who are passionate about creating a safer world..
Detection and Response: The company detects and responds to cybersecurity incidents through {description_of_detection_and_response_process}.
Incident Details
Incident 1: Ransomware Attack
Title: {Incident_Title}
Description: {Brief_description_of_the_incident}
Date Detected: {Detection_Date}
Date Publicly Disclosed: {Disclosure_Date}
Date Resolved: {Resolution_Date}
Type: {Type_of_Attack}
Attack Vector: {Attack_Vector}
Vulnerability Exploited: {Vulnerability}
Threat Actor: {Threat_Actor}
Motivation: {Motivation}
Incident 2: Data Breach
Title: {Incident_Title}
Description: {Brief_description_of_the_incident}
Date Detected: {Detection_Date}
Date Publicly Disclosed: {Disclosure_Date}
Date Resolved: {Resolution_Date}
Type: {Type_of_Attack}
Attack Vector: {Attack_Vector}
Vulnerability Exploited: {Vulnerability}
Threat Actor: {Threat_Actor}
Motivation: {Motivation}
Common Attack Types: As of now, the company has not encountered any reported incidents involving common cyberattacks.
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through {description_of_identification_process}.
Impact of the Incidents
Incident 1: Ransomware Attack
Financial Loss: {Financial_Loss}
Data Compromised: {Data_Compromised}
Systems Affected: {Systems_Affected}
Downtime: {Downtime}
Operational Impact: {Operational_Impact}
Conversion Rate Impact: {Conversion_Rate_Impact}
Revenue Loss: {Revenue_Loss}
Customer Complaints: {Customer_Complaints}
Brand Reputation Impact: {Brand_Reputation_Impact}
Legal Liabilities: {Legal_Liabilities}
Identity Theft Risk: {Identity_Theft_Risk}
Payment Information Risk: {Payment_Information_Risk}
Incident 2: Data Breach
Financial Loss: {Financial_Loss}
Data Compromised: {Data_Compromised}
Systems Affected: {Systems_Affected}
Downtime: {Downtime}
Operational Impact: {Operational_Impact}
Conversion Rate Impact: {Conversion_Rate_Impact}
Revenue Loss: {Revenue_Loss}
Customer Complaints: {Customer_Complaints}
Brand Reputation Impact: {Brand_Reputation_Impact}
Legal Liabilities: {Legal_Liabilities}
Identity Theft Risk: {Identity_Theft_Risk}
Payment Information Risk: {Payment_Information_Risk}
Average Financial Loss: The average financial loss per incident is {average_financial_loss}.
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are {list_of_commonly_compromised_data_types}.
Incident 1: Ransomware Attack
Entity Name: {Entity_Name}
Entity Type: {Entity_Type}
Industry: {Industry}
Location: {Location}
Size: {Size}
Customers Affected: {Customers_Affected}
Incident 2: Data Breach
Entity Name: {Entity_Name}
Entity Type: {Entity_Type}
Industry: {Industry}
Location: {Location}
Size: {Size}
Customers Affected: {Customers_Affected}
Response to the Incidents
Incident 1: Ransomware Attack
Incident Response Plan Activated: {Yes/No}
Third Party Assistance: {Yes/No}
Law Enforcement Notified: {Yes/No}
Containment Measures: {Containment_Measures}
Remediation Measures: {Remediation_Measures}
Recovery Measures: {Recovery_Measures}
Communication Strategy: {Communication_Strategy}
Adaptive Behavioral WAF: {Adaptive_Behavioral_WAF}
On-Demand Scrubbing Services: {On_Demand_Scrubbing_Services}
Network Segmentation: {Network_Segmentation}
Enhanced Monitoring: {Enhanced_Monitoring}
Incident 2: Data Breach
Incident Response Plan Activated: {Yes/No}
Third Party Assistance: {Yes/No}
Law Enforcement Notified: {Yes/No}
Containment Measures: {Containment_Measures}
Remediation Measures: {Remediation_Measures}
Recovery Measures: {Recovery_Measures}
Communication Strategy: {Communication_Strategy}
Adaptive Behavioral WAF: {Adaptive_Behavioral_WAF}
On-Demand Scrubbing Services: {On_Demand_Scrubbing_Services}
Network Segmentation: {Network_Segmentation}
Enhanced Monitoring: {Enhanced_Monitoring}
Incident Response Plan: The company's incident response plan is described as {description_of_incident_response_plan}.
Third-Party Assistance: The company involves third-party assistance in incident response through {description_of_third_party_involvement}.
Data Breach Information
Incident 2: Data Breach
Type of Data Compromised: {Type_of_Data}
Number of Records Exposed: {Number_of_Records}
Sensitivity of Data: {Sensitivity_of_Data}
Data Exfiltration: {Yes/No}
Data Encryption: {Yes/No}
File Types Exposed: {File_Types}
Personally Identifiable Information: {Yes/No}
Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: {description_of_prevention_measures}.
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through {description_of_handling_process}.
Ransomware Information
Incident 1: Ransomware Attack
Ransom Demanded: {Ransom_Amount}
Ransom Paid: {Ransom_Paid}
Ransomware Strain: {Ransomware_Strain}
Data Encryption: {Yes/No}
Data Exfiltration: {Yes/No}
Ransom Payment Policy: The company's policy on paying ransoms in ransomware incidents is described as {description_of_ransom_payment_policy}.
Data Recovery from Ransomware: The company recovers data encrypted by ransomware through {description_of_data_recovery_process}.
Regulatory Compliance
Incident 1: Ransomware Attack
Regulations Violated: {Regulations_Violated}
Fines Imposed: {Fines_Imposed}
Legal Actions: {Legal_Actions}
Regulatory Notifications: {Regulatory_Notifications}
Incident 2: Data Breach
Regulations Violated: {Regulations_Violated}
Fines Imposed: {Fines_Imposed}
Legal Actions: {Legal_Actions}
Regulatory Notifications: {Regulatory_Notifications}
Regulatory Frameworks: The company complies with the following regulatory frameworks regarding cybersecurity: {list_of_regulatory_frameworks}.
Ensuring Regulatory Compliance: The company ensures compliance with regulatory requirements through {description_of_compliance_measures}.
Lessons Learned and Recommendations
Incident 1: Ransomware Attack
Lessons Learned: {Lessons_Learned}
Incident 2: Data Breach
Lessons Learned: {Lessons_Learned}
Incident 1: Ransomware Attack
Recommendations: {Recommendations}
Incident 2: Data Breach
Recommendations: {Recommendations}
Key Lessons Learned: The key lessons learned from past incidents are {list_of_key_lessons_learned}.
Implemented Recommendations: The company has implemented the following recommendations to improve cybersecurity: {list_of_implemented_recommendations}.
References
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at {list_of_additional_resources}.
Investigation Status
Incident 1: Ransomware Attack
Investigation Status: {Investigation_Status}
Incident 2: Data Breach
Investigation Status: {Investigation_Status}
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through {description_of_communication_process}.
Stakeholder and Customer Advisories
Incident 1: Ransomware Attack
Stakeholder Advisories: {Stakeholder_Advisories}
Customer Advisories: {Customer_Advisories}
Incident 2: Data Breach
Stakeholder Advisories: {Stakeholder_Advisories}
Customer Advisories: {Customer_Advisories}
Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: {description_of_advisories_provided}.
Initial Access Broker
Incident 1: Ransomware Attack
Entry Point: {Entry_Point}
Reconnaissance Period: {Reconnaissance_Period}
Backdoors Established: {Backdoors_Established}
High Value Targets: {High_Value_Targets}
Data Sold on Dark Web: {Yes/No}
Incident 2: Data Breach
Entry Point: {Entry_Point}
Reconnaissance Period: {Reconnaissance_Period}
Backdoors Established: {Backdoors_Established}
High Value Targets: {High_Value_Targets}
Data Sold on Dark Web: {Yes/No}
Monitoring and Mitigation of Initial Access Brokers: The company monitors and mitigates the activities of initial access brokers through {description_of_monitoring_and_mitigation_measures}.
Post-Incident Analysis
Incident 1: Ransomware Attack
Root Causes: {Root_Causes}
Corrective Actions: {Corrective_Actions}
Incident 2: Data Breach
Root Causes: {Root_Causes}
Corrective Actions: {Corrective_Actions}
Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as {description_of_post_incident_analysis_process}.
Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: {list_of_corrective_actions_taken}.
Additional Questions
General Information
Ransom Payment History: The company has {paid/not_paid} ransoms in the past.
Last Ransom Demanded: The amount of the last ransom demanded was {last_ransom_amount}.
Last Attacking Group: The attacking group in the last incident was {last_attacking_group}.
Incident Details
Most Recent Incident Detected: The most recent incident detected was on {most_recent_incident_detected_date}.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on {most_recent_incident_publicly_disclosed_date}.
Most Recent Incident Resolved: The most recent incident resolved was on {most_recent_incident_resolved_date}.
Impact of the Incidents
Highest Financial Loss: The highest financial loss from an incident was {highest_financial_loss}.
Most Significant Data Compromised: The most significant data compromised in an incident was {most_significant_data_compromised}.
Most Significant System Affected: The most significant system affected in an incident was {most_significant_system_affected}.
Response to the Incidents
Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was {third_party_assistance_in_most_recent_incident}.
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident were {containment_measures_in_most_recent_incident}.
Data Breach Information
Most Sensitive Data Compromised: The most sensitive data compromised in a breach was {most_sensitive_data_compromised}.
Number of Records Exposed: The number of records exposed in the most significant breach was {number_of_records_exposed}.
Ransomware Information
Highest Ransom Demanded: The highest ransom demanded in a ransomware incident was {highest_ransom_demanded}.
Highest Ransom Paid: The highest ransom paid in a ransomware incident was {highest_ransom_paid}.
Regulatory Compliance
Highest Fine Imposed: The highest fine imposed for a regulatory violation was {highest_fine_imposed}.
Most Significant Legal Action: The most significant legal action taken for a regulatory violation was {most_significant_legal_action}.
Lessons Learned and Recommendations
Most Significant Lesson Learned: The most significant lesson learned from past incidents was {most_significant_lesson_learned}.
Most Significant Recommendation Implemented: The most significant recommendation implemented to improve cybersecurity was {most_significant_recommendation_implemented}.
References
Most Recent Source: The most recent source of information about an incident is {most_recent_source}.
Most Recent URL for Additional Resources: The most recent URL for additional resources on cybersecurity best practices is {most_recent_url}.
Investigation Status
Current Status of Most Recent Investigation: The current status of the most recent investigation is {current_status_of_most_recent_investigation}.
Stakeholder and Customer Advisories
Most Recent Stakeholder Advisory: The most recent stakeholder advisory issued was {most_recent_stakeholder_advisory}.
Most Recent Customer Advisory: The most recent customer advisory issued was {most_recent_customer_advisory}.
Initial Access Broker
Most Recent Entry Point: The most recent entry point used by an initial access broker was {most_recent_entry_point}.
Most Recent Reconnaissance Period: The most recent reconnaissance period for an incident was {most_recent_reconnaissance_period}.
Post-Incident Analysis
Most Significant Root Cause: The most significant root cause identified in post-incident analysis was {most_significant_root_cause}.
Most Significant Corrective Action: The most significant corrective action taken based on post-incident analysis was {most_significant_corrective_action}.
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
