View BreachRisk™ Advanced Hacker Threat Analysis for an Entity

How to see the hacker's perspective in The Cyber Questionnaire Validator.

» Standardized answers
» Prioritized by hackers
» Powered by BreachRisk™

BreachRisk™ for Insurance

Show BreachRisk™ a.i. Advanced Hacker Threat Analysis

Entity Profile

Move to Targets

Move to Book

Decline

Logan Aluminum

Add/Remove Tags...

URL/Website: www.logan-aluminum.com

Questionnaire Analysis: Partially Completed
Hacker Threat Analysis: Completed
BreachRisk™ a.i. Analysis Status
In Queue
Preparing to Scan
Finding Cyberspace
Early Answers
Hacker Analysis
Quantifying
Partial Results

Fair + accurate results of some questionnaire items have been attempted based on available evidence and observations.
BreachRisk™ a.i. is standing by for further instructions and may analyze this entity again in the future.

Results
Last Assessment: Tuesday 9 September 2025
Favorable
No Judgement
Unfavorable
Mixed
Verified Answers
10
13
 Evidence Records
in last scan
Insurance Questionnaires
Hide questions under development

How would an attacker answer these common questionnaire items?
These questions, or questions like them, are found in the most popular cyber insurance questionnaires.

Category
#
Question
Answer
Answer Context
Verified
Asset Exposure & Mgmt
(6)
1
Does the Applicant have Industrial Control Systems (ICS) or Supervisory Control & Data Acquisition (SCADA) devices exposed to the public Internet? 
No
A thorough assessment of the Applicant's public attack surface did not discover any exposed ICS or SCADA services.
Verified
2
Does the Applicant have Internet of Things (IoT) devices exposed to the public Internet?
No
A thorough assessment of the Applicant's public attack surface did not discover any exposed IoT services.
Verified
4
Does the Applicant have Critical Common Vulnerabilities and Exposures (Critical CVEs) in their network? 
No
A thorough assessment of the Applicant's public attack surface did not discover any exposed Critical vulnerabilities (CVSS Score of 9.0 or higher).
Verified
Beta
5
Does the Applicant allow Remote Desktop Protocol (RDP), Virtual Network Computing (VNC) or other remote desktop connectivity to their environment(s) from the public Internet?
Not Analyzed
6
Does the Applicant allow inbound file sharing protocol connectivity (e.g. SMB) to their environment(s) from the public Internet?
Not Analyzed
7
Does the Applicant allow remote access to web-based email applications, such as Outlook Web Access (OWA)?
Not Analyzed
Breach & Claims History
(1)
8
Has the Applicant suffered a data breach in the past 3 years?
Not Analyzed
Controls
(4)
9
Does the Applicant use DMARC for incoming email?
Yes
The Applicant's primary email domain (logan-aluminum.com) is configured with DMARC records to protect users from spoofed or invalid emails, and the policy is strictly enforced, which provides the greatest level of protection against potentially spoofed or invalid emails. In total, Applicant has 2 domains configured for email. All domains are protected with valid DMARC records.
Verified
10
Does the Applicant enforce Sender Policy Framework (SPF) for incoming email?
Yes
The Applicant's primary email domain (logan-aluminum.com) is configured with Sender Policy Framework (SPF) records to protect users from spoofed or invalid emails, and the policy is strictly enforced, which provides the greatest level of protection against potentially spoofed or invalid emails. In total, Applicant has 2 domains configured for email. All domains are protected with valid SPF records.
Verified
11
Does the Applicant block access to email using legacy email protocols (e.g. SMTP, IMAP, POP3) that do not support multi-factor authentication?
Yes
5 legacy email services were detected from the Internet.
Verified
12
Does the Applicant disable macros by default in Microsoft 365?
Not Analyzed
Cyber Solutions, Services & Technologies
(4)
13
What email solution(s) does the Applicant use for its users?
Contextual
The Applicant's primary email domain (logan-aluminum.com) uses Microsoft 365 for its email provider. In total, Applicant has 2 domains configured for email. Email providers detected are:  Microsoft 365 (1 domain),  Hybrid/Unclear (1 domain), 
Verified
14
What email security solution(s) does the Applicant use to protect its users from social engineering threats?
Contextual
The Applicant's primary email domain (logan-aluminum.com) uses Cisco Secure Email as an email security gateway solution. In total, Applicant has 2 domains configured for email.
Verified
15
What identity provider (IdP) solution(s) does the Applicant use for its users?
Not Analyzed
16
Does the Applicant use any solutions or services for DDoS protection or response?
No
A thorough assessment of the Applicant's public attack surface did not discover any evidence of DDoS mitigation solutions in use.
Verified
Identity & Access Management
(2)
18
Does the Applicant require MFA for access to the following?  Microsoft 365
Not Analyzed
19
Does the Applicant require MFA for access to the following?  Google Workspace
Not Analyzed
17 results
Hacker's Additional Questions

These questions may not be found in cyber insurance questionnaires, but hackers ask themselves these questions when planning attacks.

#
Question
Answer
Answer Context
Verified
3
Does the Applicant have any known exploitable Critical Common Vulnerabilities and Exposures (Critical CVEs) that are known to be exploitable?
No
A thorough assessment of the Applicant's public attack surface did not discover any exposed Critical vulnerabilities (CVSS Score of 9.0 or higher) that are assessed to be exploitable by attackers at this time.
Verified
17
Has the Applicant had system or employee credentials leaked or made accessible to attackers on the Dark Web in the past 12 months?
Not Analyzed
2 results

BreachRisk™ Hacker Score

3.2

/10

The likelihood and impact of a breach according to attackers.

Viable Attack Pathways
Likelihood of a Breach
Impact of a Breach

Hide BreachRisk™ a.i. Advanced Hacker Threat Analysis

Hacker's Plan of Attack

According to the The Hacker's Perspective, where are the threats of a breach?

What is the Hacker's overall strategy?

Hackers prepare for an attack by summarizing the pathways and techniques needed to cause a breach. They will typically use the most dangerous attack pathway that is the easiest (i.e. most likely) and that has the highest potential impact. Sometimes they may use multiple pathways. Different threat types require different tools and skills.

Perimeter

Low Risk

Dark Web

Medium Risk

Cloud

Unknown

Email

Low Risk
Viable Perimeter Attack Pathways
Low
Moderate
High
Low
Moderate
High
Likelihood of a Breach
Impact of a Breach

Threats By Risk Level

High Risk
0
Medium Risk
0
Low Risk
7

Threats By Type

Vulnerability
0
Misconfiguration
0
Credential
7
How do hackers compare this policyholder to others?
BreachRisk™ Score
3.2
33.3
%
Better than BreachRisk™ average
Breach Impact
2.3
17.9
%
Better than BreachRisk™ average
Breach Likelihood
2
16.7
%
Better than BreachRisk™ average
Threats Detected
7
78.8
%
Better than BreachRisk™ average
Public IPs
301
92.2
%
Lower than BreachRisk™ average
Exposed Services
36
99.3
%
Lower than BreachRisk™ average
Dark Web References
1,089
363.4
%
Higher than BreachRisk™ average
Discoverable Emails
513
56.3
%
Lower than BreachRisk™ average
List of Perimeter Attack Pathways (Threats)

Attack pathways are a series of specific events that attackers believe they can use to cause a breach. Suspected and Verified threats appear to be relatively unprotected.
Every unprotected attack plan is a potential threat of a claim.

Status
Risk Level
Threat Type
Name
Threat Location
Status
Verified
(7)
Verified False
(3)
10 results
Dark Web Threat Summary

Hackers look for any advantage when planning an attack. Here are some of the data exposure (e.g. dark web) items they can see about this entity.

Active Exposed Credentials

0

Exposed Credentials (past year)

0

Exposed Credentials (All Time)

45

Total Dark Web References

1,089
Exposed Credentials
Identity
Dark Web Source
Exposure Date
What Was Found?
Active
Showing 0 results
Dark Web References Discovered
Identity
Dark Web Source
Exposure Date
What Was Found?
Showing 0 results
BreachRisk™ Score Transparency

What factors contributed to this entity's overall BreachRisk™ Score?

Aggravating Factors

The highest threats over a 90-day period form the BreachRisk™ Score. Attack pathways an attacker could actually use to cause a breach form these threats.

Danger Rating
Risk Level
Threat Type
Name
Threat Location
Status

3.2/10

Low Risk
Credential
Web Authentication Password Spraying
https://dellsmagms1.warehouse.loganaccess.com/__extraweb__authen
Verified

3.2/10

Low Risk
Credential
Web Authentication Password Spraying
http://logan-aluminum.com:2095
Verified

3.2/10

Low Risk
Credential
HTTP Basic Authentication Password Spraying
http://logan-aluminum.com:2077
Verified

3.2/10

Low Risk
Credential
Web Authentication Password Spraying
https://dellsmagms2.goto.loganaccess.com/__extraweb__authen
Verified

3.2/10

Low Risk
Credential
Web Authentication Password Spraying
https://dellsmagms3.ns.supplier.loganaccess.com/__extraweb__authen
Verified

2.6/10

Low Risk
Credential
WordPress Admin Brute Force Authentication
https://www.logan-aluminum.com/wp-login.php
Verified

2.1/10

Low Risk
Credential
CPanel Portal Password Spraying
http://www.logan-aluminum.com:2082/login
Verified
7 results
Positive Factors

What are some positive factors observed with this entity that improved the BreachRisk™ Score?

Magnitude
Positive Factors
Highly Positive
No exploitable vulnerability threats observed.
Highly Positive
No exploitable misconfiguration threats observed.
Highly Positive
No exposed credentials observed on the dark web from the last 12 months.
Highly Positive
Few high-risk services observed to be exposed to the public Internet
Highly Positive
Anonymous authentication not permitted on exposed ftp service
Risk Management Recommendations

How could this entity reduce the threat of a breach?

Magnitude
Recommendation
Associated Threats
Would Moderately Reduce Threat
Ensure unique and complex passwords are required for applications protected by basic authentication., Monitor and limit incorrect authentication attempts.
1
Would Moderately Reduce Threat
Enforce complex password requirements and multi-factor authentication on exposed web applications that allow authentication whenever possible. Monitor incorrect login attempts for indications of brute force or password spraying attacks.
4
Would Moderately Reduce Threat
Limit incorrect login attempts to the WordPress administrator portal.
1
Would Moderately Reduce Threat
Ensure multi-factor authentication (MFA) is enabled and enforced for all CPanel user accounts., Monitor and limit incorrect authentication attempts.
1
4 results