--- title: Security Rating of Companies Post-WannaCry | Kovrr description: Four years after the WannaCry ransomware attack, Kovrr analyzed the security posture of approximately 400 affected companies using their CRIMZON methodology... canonical: https://daily.dev/posts/security-rating-of-companies-post-wannacry-kovrr-wqu2yayyk twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Security Rating of Companies Post-WannaCry | Kovrr | daily.dev og:description: Four years after the WannaCry ransomware attack, Kovrr analyzed the security posture of approximately 400 affected companies using their CRIMZON methodology... og:url: https://daily.dev/posts/security-rating-of-companies-post-wannacry-kovrr-wqu2yayyk og:image: https://api.daily.dev/og/posts/WQu2YAyYk.png og:image:alt: Security Rating of Companies Post-WannaCry | Kovrr og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Security Rating of Companies Post-WannaCry | Kovrr **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 5 min read · 3 upvotes · 0 comments ## Summary Four years after the WannaCry ransomware attack, Kovrr analyzed the security posture of approximately 400 affected companies using their CRIMZON methodology and Bitsight security rating data. The research compared security scores from the week before the May 2017 attack to May 2021. About 70% of analyzed company segments improved their security ratings over the four-year period, with mid-tier companies showing the most gains. However, companies with the highest and lowest initial scores tended to decline. Educational organizations and small telecom companies showed the worst regression. The core lesson remains that timely patch management — the EternalBlue patch was available two months before WannaCry — is critical to preventing similar large-scale ransomware events. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What vulnerability did the WannaCry ransomware attack exploit in 2017? WannaCry exploited EternalBlue, a Windows OS vulnerability accessible through an exposed SMB port. Microsoft had released a patch for it in March 2017, two months before the attack, but many companies had not applied it in time. Within 24 hours of the attack starting on May 12, 2017, more than 75,000 computers globally were infected. _Teams tracking unpatched vulnerabilities like EternalBlue can follow security advisories on daily.dev._ ### Did companies affected by WannaCry improve their security posture in the years afterward? About 70% of company categories analyzed showed improved security ratings between the week before the WannaCry attack in May 2017 and the first week of May 2021. Using Bitsight security rating data and Kovrr's CRIMZON methodology across roughly 400 originally affected companies grouped into 227 categories, median-tier organizations saw the largest gains, while the highest- and lowest-rated groups tended to see declines. _Organizations benchmarking their security posture against peers can track this kind of research on daily.dev._ ## Similar posts on daily.dev - [How to improve your organization's security based on compromise assessment findings](https://daily.dev/posts/how-to-improve-your-organization-s-security-based-on-compromise-assessment-findings-jf4fzwgg5) · Securelist · 0 upvotes · 0 comments - [Financial Exposure: From Cyber Risk To Business Impact](https://daily.dev/posts/financial-exposure-from-cyber-risk-to-business-impact-at32mrct3) · Cyble · 1 upvotes · 0 comments - [Ransomware is the Scoreboard](https://daily.dev/posts/ransomware-is-the-scoreboard-egtrzwzhr) · Recorded Future Blog · 0 upvotes · 0 comments - [UK Cyber Attacks Jump 26% Year-on-Year as Ransomware Activity Doubles Globally](https://daily.dev/posts/uk-cyber-attacks-jump-26-year-on-year-as-ransomware-activity-doubles-globally-vcmpseiyw) · IT Security Guru · 1 upvotes · 1 comments - [The State of Ransomware](https://daily.dev/posts/the-state-of-ransomware-znlqyulhm) · Check Point Research · 0 upvotes · 0 comments --- Tags: [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/security-rating-of-companies-post-wannacry-kovrr-wqu2yayyk) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Security Rating of Companies Post-WannaCry | Kovrr","url":"https://daily.dev/posts/security-rating-of-companies-post-wannacry-kovrr-wqu2yayyk","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/security-rating-of-companies-post-wannacry-kovrr-wqu2yayyk"},"datePublished":"2026-07-15T15:32:04.376Z","dateModified":"2026-09-14T06:25:40.711Z","description":"Four years after the WannaCry ransomware attack, Kovrr analyzed the security posture of approximately 400 affected companies using their CRIMZON methodology...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9a8ad45682ab733f30ace01f417157a4?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9a8ad45682ab733f30ace01f417157a4?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Security Boulevard","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Security Boulevard","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3613c832180040de8d85bb29f74395be","url":"https://daily.dev/sources/securityboulevard"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/security-rating-of-companies-post-wannacry-kovrr-wqu2yayyk","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ransomware","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Boulevard","item":"https://daily.dev/sources/securityboulevard"},{"@type":"ListItem","position":3,"name":"Security Rating of Companies Post-WannaCry | Kovrr"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/security-rating-of-companies-post-wannacry-kovrr-wqu2yayyk#faq","mainEntity":[{"@type":"Question","name":"What vulnerability did the WannaCry ransomware attack exploit in 2017?","acceptedAnswer":{"@type":"Answer","text":"WannaCry exploited EternalBlue, a Windows OS vulnerability accessible through an exposed SMB port. Microsoft had released a patch for it in March 2017, two months before the attack, but many companies had not applied it in time. Within 24 hours of the attack starting on May 12, 2017, more than 75,000 computers globally were infected. Teams tracking unpatched vulnerabilities like EternalBlue can follow security advisories on daily.dev."}},{"@type":"Question","name":"Did companies affected by WannaCry improve their security posture in the years afterward?","acceptedAnswer":{"@type":"Answer","text":"About 70% of company categories analyzed showed improved security ratings between the week before the WannaCry attack in May 2017 and the first week of May 2021. Using Bitsight security rating data and Kovrr's CRIMZON methodology across roughly 400 originally affected companies grouped into 227 categories, median-tier organizations saw the largest gains, while the highest- and lowest-rated groups tended to see declines. Organizations benchmarking their security posture against peers can track this kind of research on daily.dev."}}]} ```