https://images.rankiteo.com/companyimages/msd-global.jpeg

MSD Vendor Cyber Rating & Cyber Score

msd.com

Add Your Compliance Badge

At MSD, known as Merck & Co., Inc., Rahway, NJ, USA in the United States and Canada, we are unified around our purpose: We use the power of leading-edge science to save and improve lives around the world. For more than 130 years, we have brought hope to humanity through the development of important medicines and vaccines. We aspire to be the premier research-intensive biopharmaceutical company in the world – and today, we are at the forefront of research to deliver innovative health solutions that advance the prevention and treatment of diseases in people and animals. We foster a diverse and inclusive global workforce and operate responsibly every day to enable a safe, sustainable and healthy future for all people and communities. For more information, visit www.msd.com and connect with us on Facebook, Instagram, Twitter, and YouTube.

MSD A.I CyberSecurity Scoring

MSD

Company Details

Linkedin ID:

msd-global

Website:

http://www.msd.com

Employees number:

40,830

Number of followers:

1,160,753

NAICS:

3254

Industry Type:

Pharmaceutical Manufacturing

Homepage:

msd.com

IP Addresses:

Scan still pending

Company ID:

MSD_2025770

Scan Status:

In-progress

MSD Risk Score (AI oriented)

Between 750 and 799

MSD Pharmaceutical Manufacturing

Updated: 01/04/2026

Powered by our proprietary A.I cyber incident model
Insurance preferes TPRM score to calculate premium

Get a Score Increase

MSD Global Score (TPRM)

XXXX

MSD Pharmaceutical Manufacturing

—

Instant access to detailed risk factors
Benchmark vs. industry & size peers

Vulnerabilities
Findings

MSD

Fair

Current Score

766

Baa (Fair)

01000

1 incidents

-47.0 avg impact

Incident timeline with MITRE ATT&CK tactics, techniques, and mitigations.

APRIL 2026

766

MARCH 2026

765

FEBRUARY 2026

765

JANUARY 2026

764

DECEMBER 2025

760

NOVEMBER 2025

760

OCTOBER 2025

759

SEPTEMBER 2025

804

Breach

01 Sep 2025 • Merck Sharpe & Dohme LLC

Merck Sharpe & Dohme LLC Data Breach via Graebel Companies Inc.

In September 2025, Merck Sharpe & Dohme LLC experienced a data breach via its third-party service provider, Graebel Companies Inc., which manages employee relocation services. Unauthorized access to Graebel’s systems exposed sensitive personally identifiable information (PII) of current and former Merck employees. The compromised data includes names, dates of birth, addresses, phone numbers, Social Security numbers, and financial account details. Merck confirmed the breach after an internal review and reported it to the Massachusetts Attorney General’s office in November 2025. Affected individuals were notified, and the company offered free identity theft protection services (Cyberscout) to mitigate risks. The full scope of the breach remains undetermined but is potentially significant, with legal firms investigating compensation claims for victims, including reimbursement for financial losses, time spent resolving issues, and emotional distress.

757

high -47

MSD0602706111825

Incident Details -

Type

data breach third-party breach

Attack Vector

unauthorized access supply chain compromise

Impact

Graebel Companies Inc. systems Brand Reputation Impact: potential (ongoing investigation) Legal Liabilities: potential (class action lawsuits initiated) Identity Theft Risk: high (PII exposed) Payment Information Risk: high (financial account information exposed)

Response

Cyberscout (identity theft protection services) system access restrictions (by Graebel) notifications to affected individuals free identity theft protection services (Cyberscout) direct mailing to affected individuals public disclosure via Massachusetts Attorney General’s office legal advisories via Shamis & Gentile P.A.

Data Breach

personally identifiable information (PII) financial account information Sensitivity Of Data: high Data Exfiltration: likely (under investigation) name date of birth address phone number Social Security number

Regulatory Compliance

class action lawsuits (investigated by Shamis & Gentile P.A.) Massachusetts Attorney General’s office (reported on 2025-11-17)

Recommendations

Monitor financial accounts for suspicious activity Sign up for free Cyberscout identity theft protection services Place a fraud alert with credit bureaus Request free annual credit reports Seek legal counsel for compensation eligibility

Investigation Status

ongoing (full extent of breach not yet known)

Customer Advisories

Free identity theft protection (Cyberscout) Fraud alert and credit report recommendations Legal compensation eligibility

Stakeholder Advisories

notifications mailed to affected individuals

Initial Access Broker

employee PII and financial data

References

Blog URL Source URL

AUGUST 2025

804

JULY 2025

804

JUNE 2025

804

MAY 2025

804

Frequently Asked Questions

What is the current A.I Rankiteo Cyber Score for MSD ?

According to Rankiteo, the current A.I.-based Cyber Score for MSD is 766, which corresponds to a Fair rating.

What was MSD’s A.I Rankiteo Cyber Score in March 2026 ?

According to Rankiteo, the A.I. Rankiteo Cyber Score for March 2026 was 765.

What was MSD’s A.I Rankiteo Cyber Score in February 2026 ?

According to Rankiteo, the A.I. Rankiteo Cyber Score for February 2026 was 765.

What was MSD’s A.I Rankiteo Cyber Score in January 2026 ?

According to Rankiteo, the A.I. Rankiteo Cyber Score for January 2026 was 764.

What was MSD’s A.I Rankiteo Cyber Score in December 2025 ?

According to Rankiteo, the A.I. Rankiteo Cyber Score for December 2025 was 760.

What was MSD’s A.I Rankiteo Cyber Score in November 2025 ?

According to Rankiteo, the A.I. Rankiteo Cyber Score for November 2025 was 760.

What was MSD’s A.I Rankiteo Cyber Score in October 2025 ?

According to Rankiteo, the A.I. Rankiteo Cyber Score for October 2025 was 759.

What was MSD’s A.I Rankiteo Cyber Score in September 2025 ?

According to Rankiteo, the A.I. Rankiteo Cyber Score for September 2025 was 757.

What was MSD’s A.I Rankiteo Cyber Score in August 2025 ?

According to Rankiteo, the A.I. Rankiteo Cyber Score for August 2025 was 804.

What was MSD’s A.I Rankiteo Cyber Score in July 2025 ?

According to Rankiteo, the A.I. Rankiteo Cyber Score for July 2025 was 804.

What was MSD’s A.I Rankiteo Cyber Score in June 2025 ?

According to Rankiteo, the A.I. Rankiteo Cyber Score for June 2025 was 804.

What was MSD’s A.I Rankiteo Cyber Score in May 2025 ?

According to Rankiteo, the A.I. Rankiteo Cyber Score for May 2025 was 804.

What is the average per-incident point impact on MSD’s A.I Rankiteo Cyber Score over the past 12 months ?

Over the past 12 months, the average per-incident point impact on MSD’s A.I Rankiteo Cyber Score has been -47.0 points.

Where can I access detailed records of all cyber incidents associated with MSD ?

You can access MSD’s cyber incident details on Rankiteo by visiting the following link: https://www.rankiteo.com/company/msd-global.

Where can I find a summary of the A.I Rankiteo Risk Scoring methodology ?

You can find the summary of the A.I Rankiteo Risk Scoring methodology on Rankiteo by visiting the following link: Rankiteo Algorithm.

Where can I view MSD’s profile page on Rankiteo ?

You can view MSD’s profile page on Rankiteo by visiting the following link: https://www.rankiteo.com/company/msd-global.

How accurate is the A.I Rankiteo Risk Scoring methodology ?

With scores of 18.5/20 from OpenAI ChatGPT, 20/20 from Mistral AI, and 17/20 from Claude AI, the A.I. Rankiteo Risk Scoring methodology is validated as a market leader.