SecurityScorecard
Provides security ratings and supply-chain cyber risk monitoring for enterprises, insurers and governments.
At a glance
- Entity level
- Organisation
- Type
- Company (private)
- Also known as
- ['STRIKE Threat Intelligence']
- Flagship output
- Global Third-Party Breach Report (latest: 2025 Global Third-Party Breach Report, 26 March 2025)
- Category
- Cyber & technology risk
- Also covers
- Security ratings and third-party breach research
- Tier
- Tier 2: Major security-ratings provider whose STRIKE team publishes widely cited third-party breach research.
- Headquarters
- New York, United States
- Coverage
- Global organisations and supply chains
- Public access
- Freemium
- Latest activity seen
- 26 Mar 2025
- Evidence
- Active in 2025 to 26
How it produces intelligence
STRIKE threat intelligence unit analysing breach data from OSINT, filings, lawsuits, disclosures and criminal forums alongside ratings telemetry.
Risk themes
Focus regions
Leadership
- Ryan Sherstobitoff, SVP, STRIKE Threat Research and Intelligence
Links
What it publishes
| Output | Type | Cadence | Latest edition | Date | |
|---|---|---|---|---|---|
| Global Third-Party Breach Report | Threat report | Annual | 2025 Global Third-Party Breach Report | 26 Mar 2025 | Read report |
Latest findings
Recent public risk calls by SecurityScorecard, summarised in our own words. They are its views, not 311's. Follow each source for the original.
About 35.5% of 2024 breaches involved a third party, likely an undercount given under-reporting.
26 Mar 2025 · Horizon: 2024 · Source: SecurityScorecard 2025 Global Third-Party Breach Report (Dark Reading)41.4% of ransomware attacks began through a third party, with Cl0p the heaviest user of supplier access.
26 Mar 2025 · Horizon: 2024 · Source: SecurityScorecard 2025 Global Third-Party Breach Report (Dark Reading)Retail and hospitality had the highest third-party breach rate (52.4%), ahead of technology and energy and utilities.
26 Mar 2025 · Horizon: 2024 · Source: SecurityScorecard 2025 Global Third-Party Breach Report (Dark Reading)
Questions about SecurityScorecard
What is SecurityScorecard?
Provides security ratings and supply-chain cyber risk monitoring for enterprises, insurers and governments.
How does SecurityScorecard produce its intelligence?
STRIKE threat intelligence unit analysing breach data from OSINT, filings, lawsuits, disclosures and criminal forums alongside ratings telemetry.
Where is SecurityScorecard based?
SecurityScorecard is based in New York, United States.
What does SecurityScorecard cover?
Its work covers cyber, trade & supply chains, with a focus on Global.
Profile compiled by the 311 Strategic Intelligence Unit from public sources. Last checked 21 Oct 2026. Listing is not a ranking or an endorsement. Evidence source. Is this your organisation? Request a correction.