UCB
Company Details
Linkedin ID:
us-census-bureau
Website:
Employees number:
11,978
Number of followers:
63,746
NAICS:
92
Industry Type:
Homepage:
census.gov
IP Addresses:
0
Company ID:
U.S_1398862
Scan Status:
In-progress
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
U.S. Census Bureau Vendor Cyber Rating & Cyber Score
census.govThe Census Bureau serves as the nation’s leading provider of quality data about its people and economy. We have been headquartered in Suitland, Maryland since 1942, and currently employ about 4,285 staff members. We are part of the U.S. Department of Commerce and overseen by the Economics and Statistics Administration (ESA). We honor privacy, protect confidentiality, share our expertise globally, and conduct our work openly. We are guided on this mission by our strong and capable workforce, our readiness to innovate, and our abiding commitment to our customers. View our comment policy: https://www.census.gov/about/contact-us/comment-policy.html View our privacy policy: https://www.census.gov/about/policies/privacy/privacy-policy.html
U.S. Census Bureau A.I CyberSecurity Scoring
UCB Risk Score (AI oriented)Between 750 and 799
UCB
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
UCB Global Score (TPRM)XXXX
UCB
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
UCB Company CyberSecurity News & History
Past Incidents
1
Attack Types
1
U.S. Census Bureau
Cyber Attack
Rankiteo Explanation
Attack threatening the economy of a geographical region
Description: United States Census Bureau fell victim to a cyberattack in January 2020 that was traced back to a Citrix vulnerability. The attackers managed to breach the internal network used to manage the agency’s remote workers but the automated firewall blocked communications with the attacker’s command and control servers. No census information or data was accessed by the attackers as the backdoor was discovered and removed.
UCB Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for UCB
Incidents vs Government Administration Industry Average (This Year)
No incidents recorded for U.S. Census Bureau in 2026.
Incidents vs All-Companies Average (This Year)
No incidents recorded for U.S. Census Bureau in 2026.
Incident Types UCB vs Government Administration Industry Avg (This Year)
No incidents recorded for U.S. Census Bureau in 2026.
Incident History — UCB (X = Date, Y = Severity)
UCB cyber incidents detection timeline including parent company and subsidiaries
UCB Company Subsidiaries
The Census Bureau serves as the nation’s leading provider of quality data about its people and economy. We have been headquartered in Suitland, Maryland since 1942, and currently employ about 4,285 staff members. We are part of the U.S. Department of Commerce and overseen by the Economics and Statistics Administration (ESA). We honor privacy, protect confidentiality, share our expertise globally, and conduct our work openly. We are guided on this mission by our strong and capable workforce, our readiness to innovate, and our abiding commitment to our customers. View our comment policy: https://www.census.gov/about/contact-us/comment-policy.html View our privacy policy: https://www.census.gov/about/policies/privacy/privacy-policy.html
Loading...
UCB Similar Companies
Ministero dell'Interno
Il ministero dell'Interno è una struttura complessa il cui assetto organizzativo è disciplinato dal D.L.vo n. 300/99 e dai provvedimenti attuativi. A livello centrale, si articola in uffici di diretta collaborazione con il ministro (D.P.R. n. 98/2002) e cinque dipartimenti (D.P.R. n. 398/2001 e succ
U.S. Environmental Protection Agency’s (EPA) mission is to protect human health and the environment. EPA works to ensure that: - Americans have clean air, land and water; - National efforts to reduce environmental risks are based on the best available scientific information; - Federal laws protecti
National Park Service
Most people know that the National Park Service cares for national parks, a network of over 420 natural, cultural and recreational sites across the nation. The treasures in this system – the first of its kind in the world – have been set aside by the American people to preserve, protect, and share t
Malmö stad
Bli en samhällsbyggare – jobba i Malmö stad! Genom att arbeta i Malmö stad får du möjlighet att arbeta med hållbar samhällsutveckling. Som en samhällsbyggare spelar du en viktig roll i Malmös utveckling och därför ser vi oss som framtidens arbetsplats. Människors lika värde är en förutsättning fö
Correios
Empresa Brasileira de Correios e Telégrafos foi criada como empresa em 1969 por decreto lei. Hoje conta com mais de 100.000 empregados, tem presença em todos os municípios do Brasil. NEGÓCIO: Soluções que aproximam. MISSÃO: Fornecer soluções acessíveis e confiáveis para conectar pessoas, institu
UK Home Office
At the Home Office, we help to ensure that the country is safe and secure. We’ve been looking after UK citizens since 1782. We are responsible for: - working on the problems caused by illegal drug use - shaping the alcohol strategy, policy and licensing conditions - keeping the United Kingdom safe
Ministère de l'Éducation nationale
Page officielle du ministère de l'Éducation nationale. Retrouvez toute l'information sur www.education.gouv.fr, twitter.com/education_gouv, facebook.com/education.gouv et dans nos lettres d'informations (bulletin hebdo et lettre education.gouv.fr). --------------------------------------------------
Belastingdienst
De organisatie bestaat uit diverse onderdelen, waaronder de Belastingdienst, Douane, Toeslagen, FIOD en enkele facilitaire organisaties. Met ruim 30.000 medewerkers werken we in kantoren die verspreid zijn over het hele land. Gezamenlijk heffen, innen en controleren we belastingen. Daarnaast zorgen
South African Revenue Service (SARS)
Its main functions are to: collect and administer all national taxes, duties and levies; collect revenue that may be imposed under any other legislation, as agreed on between SARS and an organ of state or institution entitled to the revenue; provide protection against the illegal importation
.png)
UCB CyberSecurity News
March 27, 2026 10:27 PM
Steven M. McAndrews
Steven M. McAndrews serves as the Deputy Director for Threat Analysis and Incident Response, within the Office of Cybersecurity, Energy Security,...
December 11, 2025 08:00 AM
U.S. GAO - GAOverview: Census Bureau Undertakes Data Collection Modernization
After the 2020 Census, the Census Bureau initiated four enterprise-wide programs to modernize and consolidate the IT systems that collect,...
September 23, 2025 07:00 AM
Beau Houser
Beau Houser serves as the Chief Information Security Officer (CISO) for the US Census Bureau where he leads the agency's cybersecurity program.
September 11, 2025 07:00 AM
US Census Bureau: AI Adoption Has Declined for Large Companies
Learn more about the data from the US Census Bureau showing large businesses using AI tools less than previous months.
May 07, 2025 07:00 AM
Every kid counts: Why the fight for a fair 2030 census matters more than ever
The first United States Census was taken at the dawn of the nation in 1790, under George Washington's presidency and then-Secretary of State...
December 05, 2024 08:00 AM
Census Bureau Identifies Seven Problems for Next Survey
The 2030 census program could encounter multiple issues, which are likely to influence the design and implementation of the population...
September 26, 2024 07:00 AM
Digital States 2024: Innovation, Inclusion and Whole-of-State Services
In the two years since the last Digital States Survey from the Center for Digital Government, leading states have put resident experience at...
May 27, 2024 07:00 AM
Prince George's has the most new businesses of any Maryland county - what's behind the surge?
Business leaders say the county is seeing growth in many types of companies, including high technology, cybersecurity and bio-health firms.
December 01, 2023 02:33 AM
Massive Cloud Leak Exposes Alteryx, Experian, US Census Bureau Data
[12/21/2017 Updated with new statement from the US Census Bureau stating Alteryx only had access to publicly available data on census.gov].
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
UCB CyberSecurity History Information
Official Website of U.S. Census Bureau
The official website of U.S. Census Bureau is http://www.census.gov.
U.S. Census Bureau’s AI-Generated Cybersecurity Score
According to Rankiteo, U.S. Census Bureau’s AI-generated cybersecurity score is 776, reflecting their Fair security posture.
How many security badges does U.S. Census Bureau’ have ?
According to Rankiteo, U.S. Census Bureau currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Has U.S. Census Bureau been affected by any supply chain cyber incidents ?
According to Rankiteo, U.S. Census Bureau has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
Does U.S. Census Bureau have SOC 2 Type 1 certification ?
According to Rankiteo, U.S. Census Bureau is not certified under SOC 2 Type 1.
Does U.S. Census Bureau have SOC 2 Type 2 certification ?
According to Rankiteo, U.S. Census Bureau does not hold a SOC 2 Type 2 certification.
Does U.S. Census Bureau comply with GDPR ?
According to Rankiteo, U.S. Census Bureau is not listed as GDPR compliant.
Does U.S. Census Bureau have PCI DSS certification ?
According to Rankiteo, U.S. Census Bureau does not currently maintain PCI DSS compliance.
Does U.S. Census Bureau comply with HIPAA ?
According to Rankiteo, U.S. Census Bureau is not compliant with HIPAA regulations.
Does U.S. Census Bureau have ISO 27001 certification ?
According to Rankiteo,U.S. Census Bureau is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of U.S. Census Bureau
U.S. Census Bureau operates primarily in the Government Administration industry.
Number of Employees at U.S. Census Bureau
U.S. Census Bureau employs approximately 11,978 people worldwide.
Subsidiaries Owned by U.S. Census Bureau
U.S. Census Bureau presently has no subsidiaries across any sectors.
U.S. Census Bureau’s LinkedIn Followers
U.S. Census Bureau’s official LinkedIn profile has approximately 63,746 followers.
NAICS Classification of U.S. Census Bureau
U.S. Census Bureau is classified under the NAICS code 92, which corresponds to Public Administration.
U.S. Census Bureau’s Presence on Crunchbase
No, U.S. Census Bureau does not have a profile on Crunchbase.
U.S. Census Bureau’s Presence on LinkedIn
Yes, U.S. Census Bureau maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/us-census-bureau.
Cybersecurity Incidents Involving U.S. Census Bureau
As of April 03, 2026, Rankiteo reports that U.S. Census Bureau has experienced 1 cybersecurity incidents.
Number of Peer and Competitor Companies
U.S. Census Bureau has an estimated 12,425 peer or competitor companies worldwide.
What types of cybersecurity incidents have occurred at U.S. Census Bureau ?
Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.
How does U.S. Census Bureau detect and respond to cybersecurity incidents ?
Detection and Response: The company detects and responds to cybersecurity incidents through an containment measures with automated firewall blocked communications, containment measures with backdoor discovered and removed..
Incident Details
Can you provide details on each incident ?
Title: United States Census Bureau Cyberattack
Description: The United States Census Bureau fell victim to a cyberattack in January 2020 that was traced back to a Citrix vulnerability. The attackers managed to breach the internal network used to manage the agency’s remote workers but the automated firewall blocked communications with the attacker’s command and control servers. No census information or data was accessed by the attackers as the backdoor was discovered and removed.
Date Detected: January 2020
Type: Cyberattack
Attack Vector: Network Intrusion
Vulnerability Exploited: Citrix Vulnerability
What are the most common types of attacks the company has faced ?
Common Attack Types: The most common types of attacks the company has faced is Cyber Attack.
How does the company identify the attack vectors used in incidents ?
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Citrix Vulnerability.
Impact of the Incidents
What was the impact of each incident ?
Incident : Cyberattack USC13507522
Systems Affected: Internal network for remote workers
Which entities were affected by each incident ?
Incident : Cyberattack USC13507522
Entity Name: United States Census Bureau
Entity Type: Government Agency
Industry: Government
Location: United States
Response to the Incidents
What measures were taken in response to each incident ?
Incident : Cyberattack USC13507522
Containment Measures: Automated firewall blocked communicationsBackdoor discovered and removed
Data Breach Information
How does the company handle incidents involving personally identifiable information (PII) ?
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by automated firewall blocked communications, backdoor discovered and removed and .
Initial Access Broker
How did the initial access broker gain entry for each incident ?
Incident : Cyberattack USC13507522
Entry Point: Citrix Vulnerability
Backdoors Established: ['Backdoor discovered and removed']
Post-Incident Analysis
What were the root causes and corrective actions taken for each incident ?
Incident : Cyberattack USC13507522
Root Causes: Citrix Vulnerability,
Additional Questions
Incident Details
What was the most recent incident detected ?
Most Recent Incident Detected: The most recent incident detected was on January 2020.
Impact of the Incidents
What was the most significant system affected in an incident ?
Most Significant System Affected: The most significant system affected in an incident was Internal network for remote workers.
Response to the Incidents
What containment measures were taken in the most recent incident ?
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was Automated firewall blocked communicationsBackdoor discovered and removed.
Initial Access Broker
What was the most recent entry point used by an initial access broker ?
Most Recent Entry Point: The most recent entry point used by an initial access broker was an Citrix Vulnerability.
.png)
Latest Global CVEs (Not Company-Specific)
Description
A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a crafted V7 file may lead to information disclosure from the affected product.
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf. Opening a crafted V7 file may lead to information disclosure from the affected product.
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=us-census-bureau' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
