Mastercard Company Cyber Security Posture
mastercard.comMastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re building a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Mastercard Company Details
mastercard
41010 employees
1766007.0
541
IT Services and IT Consulting
mastercard.com
580
MAS_1836809
In-progress
Mastercard Risk Score (AI oriented)Between 900 and 1000
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.
Mastercard Global Score.png)
Mastercard Company Scoring based on AI Models
| Model Name | Date | Description | Current Score Difference | Score |
|---|---|---|---|---|
| AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 900 and 1000 |
Mastercard Company Cyber Security News & History
| Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
|---|---|---|---|---|---|---|---|
| Mastercard | Data Leak | 50 | 2 | 08/2019 | MAS05510423 | Link | |
Rankiteo Explanation : Attack limited on finance or reputationDescription: Mastercard disclosed a data breach involving customer data from the company's Priceless Specials loyalty program. The data was made available on the Internet, with customers' names, payment card numbers, email addresses, home addresses, phone numbers, gender, and dates of birth included in the leaked info. The incident was limited to the Specials program and the only payment card information leaked was the numbers of payment cards. After the data leak was discovered, Mastercard suspended the German Priceless Specials and took down its website, leaving up only a message that said this issue has no connection to MasterCard's payment network. | |||||||
| Mastercard | Ransomware | N/A | 01/2022 | MAS914050624 | Link | ||
Rankiteo Explanation : N/ADescription: During the COVID-19 pandemic, Belgium experienced a significant increase in cybercrime, with businesses facing up to three times more cyberattacks compared to the pre-pandemic period. Mastercard's analysis revealed that malware, ransomware, and social engineering were the predominant forms of attack targeting Belgian businesses, aiming primarily to extract information. Notably, almost 1,000 Belgian businesses suffered cyberattacks in 2021, highlighting the critical importance of cybersecurity measures. The banking sector, however, demonstrated robustness with a higher cybersecurity score than the global and European averages, attributed to heavy investment in infrastructure and artificial intelligence tools for improved protection. This scenario underscores the relentless threat of cybercrime and the vital need for comprehensive cybersecurity strategies to safeguard businesses from potential attacks. | |||||||
Mastercard Company Subsidiaries
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re building a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Access Data Using Our API
Get company history
Rapid.png)
Mastercard Cyber Security News
Mastercard Backs Cybersecurity Startups With Start Path
Mastercard launches new Security Solutions programme which focuses on cybersecurity, fraud prevention & digital identity with five startups ...
Mastercard Launches Program to Support Cybersecurity Startups
Mastercard has expanded its startup engagement program with a focus on cybersecurity, fraud mitigation and payment resiliency.
How Mastercard is Empowering Cyber Startups with Start Path
Mastercard launches new Security Solutions programme which focuses on cybersecurity, fraud prevention & digital identity with five startups ...
Mastercard Backs Five Cybersecurity Startups to Fight Fraud
Mastercard launches new Security Solutions programme, partnering with innovative startups to strengthen digital payment protection.
Small business cybersecurity: Survey shows reason for worry
The impact of these attacks — most commonly hacking, malware and phishing, according to the survey — puts a financial strain on businesses.
Mastercard acquires cybersecurity firm for $2.65B
Mastercard acquires cybersecurity firm for $2.65B. The acquisition is the latest in a series of cybersecurity firm purchases by the card network over the years.
Mastercard unveils security-focused Start Path program
Mastercard has launched its Start Path Security Solutions accelerator aimed at supporting start-ups tackling cybersecurity, fraud prevention ...
Mastercard launches new programme for startups
Mastercard Start Path rolls out its Security Solutions programme to help startups in the cybersecurity market grow and scale.
Mastercard’s Small Business Navigator Aims to Level up Small Businesses
The program offers education, insights, protection, and planning tools, and is available to all merchants, whether or not they hold a Mastercard ...
Mastercard Similar Companies
UST
UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to op
Engineering Group
Engineering Group is the Digital Transformation Company, leader in Italy and expanding its global footprint, with around 14,000 associates and with over 80 offices spread across Europe, the United States, and South America and global delivery. The Engineering Group, consisting of over 70 companies
Diebold Nixdorf
We automate, digitize and transform the way people bank and shop. We offer proven expertise and comprehensive portfolios in cutting-edge product technology, multi-vendor software and service excellence for financial and retail customers. Consumer behavior is changing rapidly; people are empowered a
IGT Solutions
IGT Solutions is a next-gen customer experience (CX) company, defining and delivering AI-led transformative experiences for the global and most innovative brands using digital technologies. With the combination of Digital and Human Intelligence, IGT becomes the preferred partner for managing end-to-
Ricoh USA, Inc.
There’s no such thing as too much information. We bring people, processes, and technology together to make information work for you. At Ricoh, we unlock the power of information so organizations can unlock the full potential of their people. We're a leader in information management and digital ser
Zoom
Bring teams together, reimagine workspaces, engage new audiences, and delight your customers –– all on the Zoom platform you know and love. 💙 Zoomies help people stay connected so they can get more done together. We set out on a mission to make video communications frictionless and secure by buildi
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
Mastercard CyberSecurity History Information
How many cyber incidents has Mastercard faced?
Total Incidents: According to Rankiteo, Mastercard has faced 2 incidents in the past.
What types of cybersecurity incidents have occurred at Mastercard?
Incident Types: The types of cybersecurity incidents that have occurred incidents Data Leak and Ransomware.
How does Mastercard detect and respond to cybersecurity incidents?
Detection and Response: The company detects and responds to cybersecurity incidents through containment measures with Suspended the German Priceless Specials, Took down its website.
Incident Details
Can you provide details on each incident?
Incident : malware
Title: Increased Cyberattacks on Belgian Businesses During COVID-19 Pandemic
Description: During the COVID-19 pandemic, Belgium experienced a significant increase in cybercrime, with businesses facing up to three times more cyberattacks compared to the pre-pandemic period. Mastercard's analysis revealed that malware, ransomware, and social engineering were the predominant forms of attack targeting Belgian businesses, aiming primarily to extract information. Notably, almost 1,000 Belgian businesses suffered cyberattacks in 2021, highlighting the critical importance of cybersecurity measures. The banking sector, however, demonstrated robustness with a higher cybersecurity score than the global and European averages, attributed to heavy investment in infrastructure and artificial intelligence tools for improved protection. This scenario underscores the relentless threat of cybercrime and the vital need for comprehensive cybersecurity strategies to safeguard businesses from potential attacks.
Type: malware
Attack Vector: malware, ransomware, social engineering
Motivation: Information Extraction
Incident : Data Breach
Title: Mastercard Data Breach
Description: Mastercard disclosed a data breach involving customer data from the company's Priceless Specials loyalty program. The data was made available on the Internet, with customers' names, payment card numbers, email addresses, home addresses, phone numbers, gender, and dates of birth included in the leaked info. The incident was limited to the Specials program and the only payment card information leaked was the numbers of payment cards. After the data leak was discovered, Mastercard suspended the German Priceless Specials and took down its website, leaving up only a message that said this issue has no connection to MasterCard's payment network.
Type: Data Breach
What are the most common types of attacks the company has faced?
Common Attack Types: The most common types of attacks the company has faced is Data Leak.
Impact of the Incidents
What was the impact of each incident?
Incident : Data Breach MAS05510423
Data Compromised: customer names, payment card numbers, email addresses, home addresses, phone numbers, gender, dates of birth
What types of data are most commonly compromised in incidents?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are customer names, payment card numbers, email addresses, home addresses, phone numbers, gender and dates of birth.
Which entities were affected by each incident?
Response to the Incidents
What measures were taken in response to each incident?
Incident : Data Breach MAS05510423
Containment Measures: Suspended the German Priceless Specials, Took down its website
Data Breach Information
What type of data was compromised in each breach?
Incident : Data Breach MAS05510423
Type of Data Compromised: customer names, payment card numbers, email addresses, home addresses, phone numbers, gender, dates of birth
Personally Identifiable Information: customer names, email addresses, home addresses, phone numbers, gender, dates of birth
How does the company handle incidents involving personally identifiable information (PII)?
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through were Suspended the German Priceless Specials and Took down its website.
Lessons Learned and Recommendations
What recommendations were made to prevent future incidents?
Incident : malware MAS914050624
Recommendations: Heavy investment in infrastructure, Use of artificial intelligence tools for improved protection
What recommendations has the company implemented to improve cybersecurity?
Implemented Recommendations: The company has implemented the following recommendations to improve cybersecurity: Heavy investment in infrastructure, Use of artificial intelligence tools for improved protection.
References
Where can I find more information about each incident?
Incident : malware MAS914050624
Source: Mastercard's analysis
Where can stakeholders find additional resources on cybersecurity best practices?
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Mastercard's analysis.
Additional Questions
Impact of the Incidents
What was the most significant data compromised in an incident?
Most Significant Data Compromised: The most significant data compromised in an incident were customer names, payment card numbers, email addresses, home addresses, phone numbers, gender and dates of birth.
Response to the Incidents
What containment measures were taken in the most recent incident?
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident were Suspended the German Priceless Specials and Took down its website.
Data Breach Information
What was the most sensitive data compromised in a breach?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were customer names, payment card numbers, email addresses, home addresses, phone numbers, gender and dates of birth.
Lessons Learned and Recommendations
What was the most significant recommendation implemented to improve cybersecurity?
Most Significant Recommendation Implemented: The most significant recommendation implemented to improve cybersecurity was Heavy investment in infrastructure, Use of artificial intelligence tools for improved protection.
References
What is the most recent source of information about an incident?
Most Recent Source: The most recent source of information about an incident is Mastercard's analysis.
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
