Security Assessment of the Top 100 U.S. Gov’t Contractors

Federal contractors are integral to supporting the operations of the U.S. government. However, as these contractors face evolving cyber threats, it’s critical to understand the vulnerabilities that could affect their ability to secure sensitive data and provide essential services. This report examines the security ratings and breach histories of the top 100 U.S. government contractors, uncovering significant gaps that could disrupt government functions and expose sensitive information.

Key Findings:

• 58% of breaches were caused by third-party vulnerabilities, posing a direct threat to both contractors and the government.
• 35% of contractors had at least one publicly reported breach, with some experiencing multiple incidents, indicating a recurring security problem.
• Ransomware groups were responsible for 41.25% of breaches, and the frequency of attacks on third-party vendors (46.5%) is rising.
• 28% of contractors had malware infections or compromised devices, showing a need for stronger internal security measures.
• Defense and intelligence contractors had the highest security ratings, but technology and telecommunications contractors were among the lowest.

Download this report to learn more about the current landscape and discover practical steps that can be taken to enhance the security of the federal supply chain.