Vodafone
Company Details
Linkedin ID:
vodafone
Website:
Employees number:
146,370
Number of followers:
2,481,505
NAICS:
517
Industry Type:
Homepage:
vodafone.com
IP Addresses:
346
Company ID:
VOD_1764368
Scan Status:
Completed
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
Vodafone Vendor Cyber Rating & Cyber Score
vodafone.comAt Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live, we protect the planet and help our customers do the same. But we’re not just shaping the future of technology for our customers – we’re shaping the future for everyone who joins our team too. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable, more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities and support to help you belong and make a real impact. #TogetherWeCan
Vodafone A.I CyberSecurity Scoring
Vodafone Risk Score (AI oriented)Between 650 and 699
Vodafone
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
Vodafone Global Score (TPRM)XXXX
Vodafone
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
Vodafone Company CyberSecurity News & History
Past Incidents
7
Attack Types
4
Vodafone
Breach
Rankiteo Explanation
Attack with significant impact with customers data leaks
Description: Vodafone realised they suffered a data breach after that cybercriminals have broken into a sales partner and copied sensitive data. There has been a cyber issue at Vodafone's partner Vertriebswerk in which critical data leaked; this is not a phishing email; many Vodafone customers are currently receiving emails requesting them to set a new password. Name, birthday, email address, mobile phone number, address, bank information (IBAN/BIC), and customer password are all impacted, according to Vodafone in the email that is available online. Vodafone promptly reported the occurrence to the Federal Commissioner for Data Protection and Freedom of Information.
Vodafone
Ransomware
Rankiteo Explanation
Attack limited on finance or reputation
Description: Vodafone's online sales of "Callya" prepaid cards were impacted by the purported ransomware attack on the IT service company Materna. The Vodafone website stopped selling the SIM cards, just after Materna had given the business permission to launch a "professionally elaborated cyber attack. Both businesses emphasise that there hasn't been any determination of a consumer data leak. "Restrictions on online sales and online registration of Callya products" should be lifted soon, according to Vodafone. Until then, there would be other ways to make the reservation. Many clients' systems were also impacted by the Materna security breach. There were Materna-operated check-in machine outages at several German airports. Workers were "equipped with newly installed or completely newly configured systems," which had never been linked to the impacted infrastructure.
Vodafone
Breach
Rankiteo Explanation
Attack threatening the economy of a geographical region
Description: Vodafone Italia suffered a data breach incident after one of its commercial partners, FourB S.p.A., which operates as a reseller of telecommunications services in the country, suffered a cyberattack. The cyberattack took place in the first week of September and resulted in the compromise of sensitive subscriber details. The exposed information includes subscription details, identity documents with sensitive data, and contact details. Even KelvinSecurity offered to sell a collection of 295,000 files totalling 310 GB of data they allegedly stole from Vodafone Italia and advertised the cache on messaging platforms and at least one hacker forum.
Vodafone
Cyber Attack
Rankiteo Explanation
Attack threatening the economy of a geographical region
Description: The customer data services of Vodafone Portugal went down recently in several areas as it was targeted in a malicious cyberattack. The 3G network was fixed in the entire county while services like 4G and 5G mobile networks, fixed voice, television, SMS, and voice/digital answering services are still offline. The company is investigating the largest cybersecurity incident with the help of local and international cyber security teams.
Vodafone
Breach
Rankiteo Explanation
Attack with significant impact with customers data leaks
Description: Vodafone realised they suffered a data breach after one of its customers recieved the personal details of 18 other Vodafone customers. The details included name, address and phone numbers for 18 customer accounts along with her e-bill. The company investigated the incident and found out that the issue was a result of an isolated technical glitch which they fixed afterwards.
Vodafone
Breach
Rankiteo Explanation
Attack limited on finance or reputation
Description: Vodafone claims that hackers attempted to access consumers' accounts by using the emails and passwords they had taken from an unidentified source. At that moment, the business started a thorough investigation to get all the information needed to provide the best guidance possible to any impacted clients. The telecoms provider claims that 1,827 customer accounts were hacked by the crooks, who obtained the last four digits of the consumers' bank accounts, their names, and their mobile phone numbers. Although credit or debit card numbers or other information were not acquired, it is crucial to remember that information that is accessible by thieves may be utilized for fraudulent purposes.
Vodafone
Data Leak
Rankiteo Explanation
Attack with significant impact with customers data leaks
Description: An intruder hacked into a Vodafone Group Plc (VOD) server in Germany and gained access to 2 million customers’ personal details and banking information. A person stole data including names, addresses, birth dates, and bank account information. However, the hacker had no access to credit card information, passwords, PIN numbers or mobile-phone numbers.
Vodafone Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for Vodafone
Incidents vs Telecommunications Industry Average (This Year)
No incidents recorded for Vodafone in 2026.
Incidents vs All-Companies Average (This Year)
No incidents recorded for Vodafone in 2026.
Incident Types Vodafone vs Telecommunications Industry Avg (This Year)
No incidents recorded for Vodafone in 2026.
Incident History — Vodafone (X = Date, Y = Severity)
Vodafone cyber incidents detection timeline including parent company and subsidiaries
Vodafone Company Subsidiaries
At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live, we protect the planet and help our customers do the same. But we’re not just shaping the future of technology for our customers – we’re shaping the future for everyone who joins our team too. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable, more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities and support to help you belong and make a real impact. #TogetherWeCan
Loading...
Vodafone Similar Companies
Telkomsel
Connecting Nation. Accelerating Indonesia's Future. As Indonesia's leading digital telecommunications company, Telkomsel is committed to building a connected, competitive, and future-ready society. For over 29 years, we've empowered individuals, homes, and businesses with innovative connectivity an
Zain Group
Zain Group is a leading provider of innovative ICT technologies & digital lifestyle communications operating in 8 markets across the Middle East & Africa, serving 51.3 million active customers as of 30 September 2025. Zain provides mobile voice, data and B2B services in: Kuwait, Bahrain, Iraq, Jorda
We are driving the digital transition of Italy and Brazil with innovative technologies and services because we want to contribute to accelerating the sustainable growth of the economy and society by bringing value and prosperity to people, companies and institutions. We offer diversified solutions
Cox Communications is committed to creating more moments of real human connection. We bring people closer to family and friends through technology that’s inspired by a culture that puts people first, and we’re always working to improve life in the communities we serve. Our world-class broadband appl
Ooredoo Group
We are an award-winning international communications company operating across the Middle East, North Africa and Southeast Asia. Serving consumers and businesses in 10 countries, we deliver a leading data experience through a broad range of content and services via our advanced, data-centric mob
ZTE Corporation
ZTE connects the world with continuous innovation for a better future. The company provides innovative technologies and integrated solutions, and its portfolio spans communication networks, computing infrastructure, industry digital solutions, and personal and home smart terminals. Serving one t
Ciena (NYSE:CIEN) is the global leader in high-speed connectivity. We build advanced networks to support exponential growth in bandwidth demand—empowering our customers, partners, and communities to thrive in the AI era. With unparalleled expertise and innovation, our networking systems, interconnec
SFR
SFR is the number one alternative telecoms operator in France. SFR is also an operator providing a comprehensive range of services meeting the expectations of private and business customers alike, offering them the best of the digital world. At year-end 2011, the total number of mobile customers was
TIM Brasil
A TIM é a empresa de telefonia móvel que mais cresce no Brasil. Atualmente, possui mais de 13 mil colaboradores em todo o país que trabalham entregando serviços inovadores e de qualidade em telefonia móvel, fixa e internet banda larga. É uma companhia feita de pessoas criativas, com energia real
.png)
Vodafone CyberSecurity News
March 24, 2026 06:43 AM
Trend Micro rebrands enterprise cybersecurity unit as TrendAI
Trend Micro has rebranded its enterprise cybersecurity business as TrendAI, reflecting a strategic shift towards securing AI-driven environments as part of...
February 05, 2026 10:00 PM
Irish SMEs Turn to Practical Cyber Solutions as AI-Driven Threats Rise, Vodafone Tells SFA Event - Irish
Irish small and medium-sized enterprises (SMEs) are increasingly aware of the growing risk posed by AI-driven cyberattacks, though most are...
January 22, 2026 08:00 AM
One in 10 UK Firms “Unlikely to Survive” Serious Cyber Incident
Major cybersecurity breaches at UK retailers and carmakers last year have raised boardroom awareness of online threats, but many senior...
January 21, 2026 08:00 AM
Cyber attack would wipe out over 10% of UK businesses – Vodafone
More than one in 10 UK businesses would be unlikely to survive a cyber attack, according to a new study from Vodafone Business.
December 24, 2025 08:32 AM
Zscaler Stock Price Prediction 2026: Growth Outlook, Market Drivers, and Comparative Insights
Zscaler stock price prediction 2026 shows strong growth potential amid rising cybersecurity demand. Explore market outlook, risks, and comparative insights...
December 10, 2025 08:00 AM
Vodafone Qatar delivers expert lecture on AI and cybersecurity at Barzan University College
The Peninsula. Doha: The growing impact of artificial intelligence (AI) on cybersecurity and telecommunications network resilience was the focus...
November 28, 2025 08:00 AM
What’s up with… Vodafone, Telecom Italia, mobile network security
Vodafone fast-tracks its 'enhanced-power' initiativeTelecom Italia highlights smart infrastructure gainsGSMA berates state of mobile...
November 27, 2025 08:00 AM
Vodafone Qatar and Microsoft Roll Out Advanced AI Solutions to Boost Connectivity and Cybersecurity
Vodafone Qatar, in partnership with Microsoft, has introduced a suite of cutting-edge digital solutions designed to elevate the country's...
November 20, 2025 08:00 AM
Vodafone Plans to Sell AI, Cybersecurity to Businesses to Boost Dividend, CEO Tells FT
Vodafone Plans to Sell AI, Cybersecurity to Businesses to Boost Dividend, CEO Tells FT ... --U.K. telecommunications company Vodafone plans to...
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
Vodafone CyberSecurity History Information
Official Website of Vodafone
The official website of Vodafone is http://www.vodafone.com/.
Vodafone’s AI-Generated Cybersecurity Score
According to Rankiteo, Vodafone’s AI-generated cybersecurity score is 682, reflecting their Weak security posture.
How many security badges does Vodafone’ have ?
According to Rankiteo, Vodafone currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Has Vodafone been affected by any supply chain cyber incidents ?
According to Rankiteo, Vodafone has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
Does Vodafone have SOC 2 Type 1 certification ?
According to Rankiteo, Vodafone is not certified under SOC 2 Type 1.
Does Vodafone have SOC 2 Type 2 certification ?
According to Rankiteo, Vodafone does not hold a SOC 2 Type 2 certification.
Does Vodafone comply with GDPR ?
According to Rankiteo, Vodafone is not listed as GDPR compliant.
Does Vodafone have PCI DSS certification ?
According to Rankiteo, Vodafone does not currently maintain PCI DSS compliance.
Does Vodafone comply with HIPAA ?
According to Rankiteo, Vodafone is not compliant with HIPAA regulations.
Does Vodafone have ISO 27001 certification ?
According to Rankiteo,Vodafone is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of Vodafone
Vodafone operates primarily in the Telecommunications industry.
Number of Employees at Vodafone
Vodafone employs approximately 146,370 people worldwide.
Subsidiaries Owned by Vodafone
Vodafone presently has no subsidiaries across any sectors.
Vodafone’s LinkedIn Followers
Vodafone’s official LinkedIn profile has approximately 2,481,505 followers.
NAICS Classification of Vodafone
Vodafone is classified under the NAICS code 517, which corresponds to Telecommunications.
Vodafone’s Presence on Crunchbase
No, Vodafone does not have a profile on Crunchbase.
Vodafone’s Presence on LinkedIn
Yes, Vodafone maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/vodafone.
Cybersecurity Incidents Involving Vodafone
As of April 02, 2026, Rankiteo reports that Vodafone has experienced 7 cybersecurity incidents.
Number of Peer and Competitor Companies
Vodafone has an estimated 10,042 peer or competitor companies worldwide.
What types of cybersecurity incidents have occurred at Vodafone ?
Incident Types: The types of cybersecurity incidents that have occurred include Data Leak, Ransomware, Breach and Cyber Attack.
How does Vodafone detect and respond to cybersecurity incidents ?
Detection and Response: The company detects and responds to cybersecurity incidents through an third party assistance with local and international cyber security teams, and remediation measures with technical glitch fixed, and communication strategy with notified customers via email to reset their passwords, and communication strategy with informing affected customers and providing guidance, and remediation measures with newly installed or completely newly configured systems for workers, and communication strategy with vodafone's statement about lifting restrictions soon..
Incident Details
Can you provide details on each incident ?
Title: Vodafone Portugal Cyberattack
Description: The customer data services of Vodafone Portugal went down recently in several areas as it was targeted in a malicious cyberattack. The 3G network was fixed in the entire county while services like 4G and 5G mobile networks, fixed voice, television, SMS, and voice/digital answering services are still offline. The company is investigating the largest cybersecurity incident with the help of local and international cyber security teams.
Type: Cyberattack
Title: Vodafone Data Breach
Description: Vodafone suffered a data breach when a customer received the personal details of 18 other Vodafone customers due to a technical glitch.
Type: Data Breach
Vulnerability Exploited: Technical Glitch
Title: Vodafone Italia Data Breach Incident
Description: Vodafone Italia suffered a data breach incident after one of its commercial partners, FourB S.p.A., which operates as a reseller of telecommunications services in the country, suffered a cyberattack.
Type: Data Breach
Threat Actor: FourB S.p.A.Even KelvinSecurity
Title: Vodafone Data Breach
Description: An intruder hacked into a Vodafone Group Plc (VOD) server in Germany and gained access to 2 million customers’ personal details and banking information.
Type: Data Breach
Attack Vector: Server Hack
Threat Actor: Unknown
Title: Vodafone Data Breach via Vertriebswerk
Description: Vodafone experienced a data breach after cybercriminals infiltrated a sales partner, Vertriebswerk, and copied sensitive data. The breach involved the leakage of critical customer information, prompting Vodafone to notify affected customers and request password resets.
Type: Data Breach
Attack Vector: Data Breach
Threat Actor: Cybercriminals
Motivation: Unauthorized Access to Sensitive Data
Title: Vodafone Data Breach
Description: Hackers attempted to access consumers' accounts by using the emails and passwords they had taken from an unidentified source. The telecoms provider claims that 1,827 customer accounts were hacked by the crooks, who obtained the last four digits of the consumers' bank accounts, their names, and their mobile phone numbers. Although credit or debit card numbers or other information were not acquired, it is crucial to remember that information that is accessible by thieves may be utilized for fraudulent purposes.
Type: Data Breach
Attack Vector: Stolen Credentials
Threat Actor: Unknown Hackers
Motivation: Data Theft
Title: Ransomware Attack on Materna Affects Vodafone and German Airports
Description: Vodafone's online sales of 'Callya' prepaid cards were impacted by the purported ransomware attack on the IT service company Materna. The Vodafone website stopped selling the SIM cards, just after Materna had given the business permission to launch a 'professionally elaborated cyber attack.' Both businesses emphasise that there hasn't been any determination of a consumer data leak. 'Restrictions on online sales and online registration of Callya products' should be lifted soon, according to Vodafone. Until then, there would be other ways to make the reservation. Many clients' systems were also impacted by the Materna security breach. There were Materna-operated check-in machine outages at several German airports. Workers were 'equipped with newly installed or completely newly configured systems,' which had never been linked to the impacted infrastructure.
Type: Ransomware Attack
What are the most common types of attacks the company has faced ?
Common Attack Types: The most common types of attacks the company has faced is Breach.
How does the company identify the attack vectors used in incidents ?
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Sales Partner (Vertriebswerk) and Stolen Credentials.
Impact of the Incidents
What was the impact of each incident ?
Incident : Cyberattack VOD153310222
Systems Affected: 4G and 5G mobile networksfixed voicetelevisionSMSvoice/digital answering services
Incident : Data Breach VOD205123422
Data Compromised: Personal details including name, address, and phone numbers
Incident : Data Breach VOD202921222
Data Compromised: Subscription details, Identity documents with sensitive data, Contact details
Incident : Data Breach VOD231421123
Data Compromised: Names, Addresses, Birth dates, Bank account information
Incident : Data Breach VOD93129723
Data Compromised: Name, Birthday, Email address, Mobile phone number, Address, Bank information (iban/bic), Customer password
Incident : Data Breach VOD129261023
Data Compromised: Names, Mobile phone numbers, Last four digits of bank account numbers
Identity Theft Risk: High
Payment Information Risk: Low
Incident : Ransomware Attack VOD41441223
Systems Affected: Vodafone's online sales of 'Callya' prepaid cardsMaterna-operated check-in machines at German airports
Operational Impact: Suspension of online sales and registration of Callya productsCheck-in machine outages at German airports
What types of data are most commonly compromised in incidents ?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personal Identifiable Information, Subscription Details, Identity Documents With Sensitive Data, Contact Details, , Personal Identifiable Information, Bank Account Information, , Personally Identifiable Information, Bank Information, , Personally Identifiable Information, Bank Account Information and .
Which entities were affected by each incident ?
Incident : Cyberattack VOD153310222
Entity Name: Vodafone Portugal
Entity Type: Telecommunications
Industry: Telecommunications
Location: Portugal
Incident : Data Breach VOD205123422
Entity Name: Vodafone
Entity Type: Telecommunications Company
Industry: Telecommunications
Customers Affected: 18
Incident : Data Breach VOD202921222
Entity Name: Vodafone Italia
Entity Type: Telecommunications
Industry: Telecommunications
Location: Italy
Incident : Data Breach VOD202921222
Entity Name: FourB S.p.A.
Entity Type: Reseller
Industry: Telecommunications
Location: Italy
Incident : Data Breach VOD231421123
Entity Name: Vodafone Group Plc
Entity Type: Telecommunications Company
Industry: Telecommunications
Location: Germany
Customers Affected: 2 million
Incident : Data Breach VOD93129723
Entity Name: Vodafone
Entity Type: Telecommunications Company
Industry: Telecommunications
Incident : Data Breach VOD129261023
Entity Name: Vodafone
Entity Type: Telecommunications Provider
Industry: Telecommunications
Customers Affected: 1827
Incident : Ransomware Attack VOD41441223
Entity Name: Vodafone
Entity Type: Telecommunications Company
Industry: Telecommunications
Incident : Ransomware Attack VOD41441223
Entity Name: Materna
Entity Type: IT Service Company
Industry: Information Technology
Incident : Ransomware Attack VOD41441223
Entity Name: German Airports
Entity Type: Airport
Industry: Aviation
Location: Germany
Response to the Incidents
What measures were taken in response to each incident ?
Incident : Cyberattack VOD153310222
Third Party Assistance: Local And International Cyber Security Teams.
Incident : Data Breach VOD205123422
Remediation Measures: Technical glitch fixed
Incident : Data Breach VOD93129723
Communication Strategy: Notified customers via email to reset their passwords
Incident : Data Breach VOD129261023
Communication Strategy: Informing affected customers and providing guidance
Incident : Ransomware Attack VOD41441223
Remediation Measures: Newly installed or completely newly configured systems for workers
Communication Strategy: Vodafone's statement about lifting restrictions soon
How does the company involve third-party assistance in incident response ?
Third-Party Assistance: The company involves third-party assistance in incident response through local and international cyber security teams, .
Data Breach Information
What type of data was compromised in each breach ?
Incident : Data Breach VOD205123422
Type of Data Compromised: Personal Identifiable Information
Number of Records Exposed: 18
Sensitivity of Data: Medium
Personally Identifiable Information: Name, Address, Phone Numbers
Incident : Data Breach VOD202921222
Type of Data Compromised: Subscription details, Identity documents with sensitive data, Contact details
Number of Records Exposed: 295,000
Sensitivity of Data: High
Data Exfiltration: Yes
Personally Identifiable Information: Yes
Incident : Data Breach VOD231421123
Type of Data Compromised: Personal identifiable information, Bank account information
Number of Records Exposed: 2 million
Sensitivity of Data: High
Personally Identifiable Information: namesaddressesbirth dates
Incident : Data Breach VOD93129723
Type of Data Compromised: Personally identifiable information, Bank information
Sensitivity of Data: High
Incident : Data Breach VOD129261023
Type of Data Compromised: Personally identifiable information, Bank account information
Number of Records Exposed: 1827
Sensitivity of Data: High
What measures does the company take to prevent data exfiltration ?
Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Technical glitch fixed, Newly installed or completely newly configured systems for workers, .
Regulatory Compliance
Were there any regulatory violations and fines imposed for each incident ?
Incident : Data Breach VOD93129723
Regulatory Notifications: Reported to the Federal Commissioner for Data Protection and Freedom of Information
References
Where can I find more information about each incident ?
Incident : Data Breach VOD93129723
Source: Online Email Notification
Where can stakeholders find additional resources on cybersecurity best practices ?
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Online Email Notification.
Investigation Status
What is the current status of the investigation for each incident ?
Incident : Cyberattack VOD153310222
Investigation Status: Ongoing
Incident : Data Breach VOD129261023
Investigation Status: Ongoing
How does the company communicate the status of incident investigations to stakeholders ?
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Notified customers via email to reset their passwords, Informing affected customers and providing guidance and Vodafone'S Statement About Lifting Restrictions Soon.
Stakeholder and Customer Advisories
Were there any advisories issued to stakeholders or customers for each incident ?
Incident : Data Breach VOD93129723
Customer Advisories: Emails requesting password resets
Incident : Data Breach VOD129261023
Customer Advisories: Guidance provided to affected customers
What advisories does the company provide to stakeholders and customers following an incident ?
Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Emails requesting password resets and Guidance provided to affected customers.
Initial Access Broker
How did the initial access broker gain entry for each incident ?
Incident : Data Breach VOD93129723
Entry Point: Sales Partner (Vertriebswerk)
Incident : Data Breach VOD129261023
Entry Point: Stolen Credentials
Post-Incident Analysis
What were the root causes and corrective actions taken for each incident ?
Incident : Data Breach VOD205123422
Root Causes: Technical Glitch
Corrective Actions: Technical glitch fixed
What is the company's process for conducting post-incident analysis ?
Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as Local And International Cyber Security Teams, .
What corrective actions has the company taken based on post-incident analysis ?
Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Technical glitch fixed.
Additional Questions
General Information
Who was the attacking group in the last incident ?
Last Attacking Group: The attacking group in the last incident were an FourB S.p.A.Even KelvinSecurity, Unknown, Cybercriminals and Unknown Hackers.
Impact of the Incidents
What was the most significant data compromised in an incident ?
Most Significant Data Compromised: The most significant data compromised in an incident were Personal details including name, address, and phone numbers, subscription details, identity documents with sensitive data, contact details, , names, addresses, birth dates, bank account information, , Name, Birthday, Email Address, Mobile Phone Number, Address, Bank Information (IBAN/BIC), Customer Password, , Names, Mobile Phone Numbers, Last Four Digits of Bank Account Numbers and .
What was the most significant system affected in an incident ?
Most Significant System Affected: The most significant system affected in an incident was 4G and 5G mobile networksfixed voicetelevisionSMSvoice/digital answering services and Vodafone's online sales of 'Callya' prepaid cardsMaterna-operated check-in machines at German airports.
Response to the Incidents
What third-party assistance was involved in the most recent incident ?
Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was local and international cyber security teams, .
Data Breach Information
What was the most sensitive data compromised in a breach ?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Mobile Phone Numbers, Personal details including name, address, and phone numbers, Last Four Digits of Bank Account Numbers, Bank Information (IBAN/BIC), Names, subscription details, Name, bank account information, identity documents with sensitive data, Email Address, addresses, Mobile Phone Number, Address, Customer Password, names, Birthday, contact details and birth dates.
What was the number of records exposed in the most significant breach ?
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 2.3M.
References
What is the most recent source of information about an incident ?
Most Recent Source: The most recent source of information about an incident is Online Email Notification.
Investigation Status
What is the current status of the most recent investigation ?
Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing.
Stakeholder and Customer Advisories
What was the most recent customer advisory issued ?
Most Recent Customer Advisory: The most recent customer advisory issued were an Emails requesting password resets and Guidance provided to affected customers.
Initial Access Broker
What was the most recent entry point used by an initial access broker ?
Most Recent Entry Point: The most recent entry point used by an initial access broker were an Stolen Credentials and Sales Partner (Vertriebswerk).
.png)
Latest Global CVEs (Not Company-Specific)
Description
A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a crafted V7 file may lead to information disclosure from the affected product.
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf. Opening a crafted V7 file may lead to information disclosure from the affected product.
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=vodafone' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
