Fortune 500 Reranking the Fortune 500 Using Darknet Intelligence

The Darknet Index: Fortune 500 Reranking the Fortune 500 using Darknet Intelligence

Introduction

We live in an era where cybersecurity often dominates the news. Yahoo, Sony and Target are only three of the many companies subjected in recent years to costly cyber attacks. No company or organization is immune from these types of attacks, and billions of dollars are spent annually in an attempt to protect the valuable data they hold. TABLE OF CONTENTS Measuring cybersecurity risk therefore becomes important for any company seeking to implement a comprehensive Introduction ...... 1 cybersecurity strategy and justify a return on the increasing Methodology...... 3 investments made. Several different risk measures exist— The Top 25 ...... 5 some financial, performance, or technology related, and others Observations...... 6 which attempt to measure the frequency of attacks thwarted. Conclusions...... 8 Each provides one aspect of guidance for management teams in their evaluation of overall risk. The Darknet Index...... 9 About Us ...... 22 However, to date, there has been no attempt to measure the cybersecurity risk or profile of companies by how much data is available on a company that can be misused. How does the availability of breached data affect the overall the overall cybersecurity profile of a company?

When data is hacked or stolen it often ends up for sale on an area of the internet known as the darknet. The darknet— actually a collection of numerous private networks, forums and channels—allows anyone using special browsers and tools to post data and communicate in a private online world. This facilitates the confidential and anonymous exchange of large amounts of stolen data.

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 2

Unlike the surface web — the internet most of us use every day — there is little indexing of darknet sites. In fact, until now, there has been no easy way to comprehensively measure a company’s presence on the darknet. OWL Cybersecurity has built a proprietary database of darknet content which is the most comprehensive one of its kind in the world. This database is automatically and continuously updated with between 10 to 15 million pages per day, from more than 24,000 domains on the Tor network alone, as well as other darknet networks. Our darknet content is indexed and searchable in 47 languages for organizations wishing to monitor their data on the darknet.

To demonstrate how the unprecedented scope and scale of our darknet data can strengthen a cybersecurity program, we used our OWL Vision database, together with additional sources of DARKINT™ — or darknet intelligence — to rerank all members of the Fortune 500 (as of April 2017) based on their darknet footprint. By doing this, we can provide each company with a snapshot view of its exposure on the darknet relative to peers, something we are uniquely positioned to provide.

Key Takeaways From Our Analysis

• Every Fortune 500 company is exposed. Every single company in the Fortune 500 had a positive Darknet Index score, meaning they have a presence on the darknet.

• Amazon leads the Index. The company with the largest darknet footprint is online retailer Amazon, who has a massive internet presence and possesses a significant amount of customer data.

• Technology and telecommunications companies overall are the largest target. Technology and telecommunication firms have the highest Darknet Index scores, indicating that they are the most attractive firms targeted by threat actors.

• Financial firms perform better than expected. Financial firms—frequent targets of hackers—fare better than expected, likely reflecting their focus on significant investment in cybersecurity in recent years.

• Hacked valuable data = increased risk. The highest scoring companies all had credentials and/or intellectual property exposed on the darknet which can be monetized by others.

• Vigilance pays off. Investing in cybersecurity has tangible Darknet Index score benefits. Sectors which have invested heavily have, in some cases, smaller darknet footprints and, thus, lower Index ratings.

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 3

Methodology

One of the biggest hurdles to widespread awareness of darknet activity is the lack of any reliable indices. Unlike the surface web, on which many organizations continuously capture and record internet activity in a historical archive, the darknet is designed to be difficult to trace. The use of special browsers is required, and users need to obtain the full URL of a destination darknet web page to visit. There is no “darknet Google,” and darknet sites are often put up and taken down within a matter of minutes to maintain anonymity.

As a result, the darknet has become a safe harbor for those looking to remain private online, whether their intentions are good or bad. A high volume of criminal activity has migrated to the darknet.

“According to our scale, every company on the Fortune 500 has a darknet ranking.”

OWL Cybersecurity’s proprietary OWL Vision is an expansive darknet database which can be queried via Boolean logic, proximity search, email domains, and more. Leveraging this, OWL Cybersecurity assessed each company in the 2017 Fortune 500 list, ultimately assigning every company with an overall darknet footprint. Combined with our proprietary hackishness algorithm — which rates darknet postings based on their potential for criminal use — our calculations yielded notable results.

To compile our Darknet Index, we ran each member of the 2017 Fortune 500 through the OWL Vision database. We focused on specific darknets for matches on each company’s website and email domains and then further adjusted the results based on computations of “hackishness”— our algorithmic rating system which scores based on the likelihood the data could be used for nefarious intent and/or has been recorded within a recent timeframe. Recent results, from within the last 90 days, were given the most weight, as recent breaches or data leaks containing an organization’s proprietary information often make the target company a target.

All mirror sites (which can be otherwise considered duplicate data) of both darknet and surface net results were excluded.

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 4

Algorithm

Our hackishness algorithm is the most critical input to these rankings as it eliminates uninteresting content hits. For simplicity, our algorithm weighted results from Tor Hidden Services and transitory sites most heavily. All results found in our database were given some weight as per the formula below:

H (ln RDS + ln RTS) = H (ln ATR) 90 ATR

H = Hackishness of last 90 days results 90 H = Hackishness of all time breach results ATR RDS = # results from Darknet Sites RTS = # results from Transitory Paste Sites ATR = # results from all time breach results

Key Methodological Points

• The Index is simple and objective. It is not biased toward company nicknames, press mentions, company size, CEO names or other subjective measures.

• The Index scale is logarithmic, meaning every point in the index reflects almost triple the profile of a single point less.

• The Index ranking reflects the attractiveness of the target. It is not a “risk of breach”. It is more closely aligned to the attractiveness of the target to a hacker while taking into account the effectiveness of their cyber defenses.

• The size of a single breach is less of a factor than the frequency of breaches over the study period.

• A company’s ranking as compared with direct competitors is very important. In future reports, we will take a closer look at more specific industry data to see the extent to which industry relates to a company’s DARKINT footprint.

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 5

The OWL Cybersecurity Darknet Index: Top 25

The results of our analysis are presented below for the top 25 companies in our Index as follows. The full ranking of the Fortune 500 companies by their darknet footprint can be found in the Darknet Index section (Page 9). We categorize all companies using the following metrics:

• DARKINT Rank - The rank of each company based on their darknet footprint score.

• Fortune 500 Rank - The rank each company is given on the annual list.

• Darknet Index Score - The darknet footprint score on which the rankings are based.

• Company Sector - The market segment as defined by the Fortune 500 list.

DARKINT Fortune Darknet Rank 500 Rank Company Name Index Score Company Sector

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 6

Observations

Every company on the Fortune 500 has a darknet ranking. This fact alone offers a glimpse into the sheer volume of information available on the darknet and confirms that no company or organization is without risk on the darknet.

The importance of the hackishness rating is seen in the case of eBay. Without such a weighting, eBay would have been by far the most highly ranked DARKINT company, with more than four times the results to its next closest entrant. Yet, when weighted for hackishness, eBay dropped to #5 (reducing its darknet footprint by more than 500 percent). Put simply, eBay has a great deal of data on the darknet, but much of the data’s potential criminal value was low.

The company with the largest hackishness-rated darknet footprint, Amazon, is not a surprise given their massive internet presence and the fraud potential of the data they maintain. In fact, the Top 5 DARKINT Index firms, Amazon, Google, Apple, Facebook and eBay, are all in the Technology sector and all use credentials extensively. Perhaps surprisingly, however, no bank registered in the top 10.

Key Takeaways

• Highest industry scores go to Technology and Telecommunications, which have both broad credentials coupled with typically smaller cybersecurity defense budgets.

• Finance and Healthcare, which receive much compliance and media focus, have industry index results within the expected range which implies their cybersecurity spending is in line with their needs.

• 6 of the top 10 ranked companies are ones that most people interact with on a regular, if not daily, basis.

• What matters most is a firm’s ranking as compared with its direct competitors. Simple statistical analysis tools become useful in evaluating each Sector.

• These rankings will change markedly over time based on multiple factors both within a company’s control and beyond.

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 7

Index Profile Analysis by Company Sector

We included an Index Profile +/-10% analysis to denote a company’s relative darknet footprint rank out of 500, as compared to their Fortune 500 rank. If the resulting percentage is above 10 percent, it indicates a statistically significant differential in DARKINT ranking versus Fortune 500 ranking. We included this analysis to demonstrate that companies of various sectors, size and revenue may have disproportionate darknet footprints, and that the vulnerability of the darknet does not necessarily correlate with what many may assume in a rankable, correlated risk.

Number Average Average Difference of Fortune 500 DARKINT (Fortune 500 Index Profile Company Sector Entries Rank Rank – DARKINT) +/- 10%

Technology 39 235 157 78 higher Retail 46 242 314 (72) lower Energy 62 255 272 (17) same Financials 79 243 233 10 same Healthcare 45 206 229 (24) same Telecommunications 12 246 187 58 higher Wholesale 27 273 331 (58) lower Media 10 243 235 8 same Food, Beverages & Tobacco 25 240 318 (77) lower Aerospace & Defense 12 204 243 (39) lower Transportation 18 254 224 30 higher Industrials 15 210 214 (4) same Food and Drug Stores 7 83 307 (224) much lower Chemicals 13 258 206 52 higher Business Services 19 334 250 84 higher Apparel 5 293 312 (19) same Household Products 13 311 255 56 higher Motor Vehicles 13 242 211 31 higher Hotels, Restaurants & Leisure 10 275 232 44 higher Engineering Construction 11 324 212 112 much higher Materials 19 341 297 44 higher

Overall, we found most Index Profiles make intuitive sense. Food and Drug Stores, for example, are not obvious targets of malicious actors while the intellectual property at organizations like large Engineering Construction firms make them candidates for hackers. Neither of these sectors is known for spending excessively in cybersecurity. The fact that companies in the Financial sector tend to score well in our survey attests to the success of their cybersecurity efforts as an industry, although results vary across firms. Anomalies such as Frontier Communication’s unexpectedly high ranking as well as Berkshire Hathaway’s low ranking may not be conclusive, but they are statistical outliers worth noting.

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 8

Conclusions

This reranking of the Fortune 500 presents a mere sliver of OWL Cybersecurity’s darknet database which includes information on tens of thousands of additional organizations and individuals. In some cases, private data for sale may have come from a breach at a Fortune 500 company, but it may not be identified as such. For example, a group of credit card credentials for sale could have been illegally obtained from either a bank or a retailer, but that information isn’t always provided or available.

What is important is not only any company’s score but also Client // DARKINT FOOTPRINT comparing this score against their MAR 2017 REPORT competitors and watching it over Prepared by: [email protected] time. That is, for any firm to have ...... a truly accurate snapshot of their DARKINT FOOTPRINT DARKINT footprint is important A darknet footprint is a measure of your presence intelligence, to determine a darknet footprint. on the darknet. It looks at the volume of an orga- DARKINT encompasses actionable data from the and requires customization. OWL nization’s digital data that could be used for nefa- darknet and other interconnected sources, inclu- rious purposes, exposed on the darknet as a ding TOR, IRC channels, hacker forums, FTP Servers, Cybersecurity does these routinely, result of hacks, breaches, or other leak(s). OWL paste sites, high-risk surface internet, and more. Cybersecurity leverages DARKINT, darknet as can be seen in the sample ...... DARKINT footprint report (pictured). DARKINT THREATS DETECTED

By monitoring one’s customized 4 6 DARKINT footprint score over time, DEEPWEB DATA DUMPS the efficacy of an organization’s 9 0 1 2 CREDENTIALS EXECUTIVES TOR *PLAIN TEXT DETECTED PASSWORDS cybersecurity efforts can be DETECTED

7 reasonably measured. As shown OCCURANCES OF CREDENTIALS 6 OVER TIME by the fact that the entirety of 5 4 the Fortune 500 is present in our 3 2 DARKINT Index, DARKINT is a key 1 NOV 2016 DEC 2016 JAN 2017 FEB 2017 MAR 2017 to a complete information security // Domain Threats: 60 Domains Queried EXECUTIVE SUMMARY: approach. We found 1114 credentials within our database, 3 belong to executives. Of those 1114 occurances, 10 19 30 1109 were from data dumps. A 46 majority (994) of those credentials TOR DEEP WEB SURFACE WEB Today, in an age where data loss DETECTED were part of a social media leak in June 2016 and the remainder in is virtually inevitable, it is critical to // IP Address Threats: 74.116.5.0 February 2017. Between July 2016 and January 2017, there was a few instances of leaked email addres- look at the darknet as a key part of ses. Addtionally, we also searched the database for instances of your a complete cybersecurity program, 3 2 1 0 594 domains and 1 of your 0/20 DETECTED TOR DEEP WEB SURFACE WEB networks - of those we found a total of 12 mentions in the databa- enabling organizations to swiftly se. detect security gaps and mitigate damage prior to the misuse of data. OWL Cybersecurity | 216 16th St. Suite 700 Denver, CO 80202 | www.owlcyber.com

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 9

The Darknet Index Ranking of the Fortune 500 Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

1 18 Amazon.com 19.16 Technology 2 36 Alphabet (Google) 17.21 Technology 3 3 Apple 15.98 Technology 4 157 Facebook 14.99 Technology 5 300 eBay 14.55 Technology 6 85 American Express 13.33 Financials 7 461 Frontier Communications 13.29 Telecommunications 8 379 Netflix 13.19 Retail 9 219 Texas Instruments 12.99 Technology 10 58 FedEx 12.58 Transportation 11 27 Wells Fargo 12.31 Financials 12 25 Microsoft 12.23 Technology 13 67 American Airlines Group 12.06 Transportation 14 10 AT&T 12.01 Telecommunications 15 37 Comcast 12.01 Telecommunications 16 11 General Electric 12.00 Industrials 17 77 Oracle 11.95 Technology 18 78 Morgan Stanley 11.57 Financials 19 20 HP 11.54 Technology 20 51 Intel 11.31 Technology 21 60 Lockheed Martin 11.30 Aerospace & Defense 22 53 Disney 10.88 Media 23 35 State Farm Insurance Cos. 10.77 Financials 24 71 Best Buy 10.72 Retail 25 75 Honeywell International 10.63 Industrials 26 307 PayPal Holdings 10.56 Business Services 27 26 Bank of America Corp. 10.52 Financials 28 74 Goldman Sachs Group 10.51 Financials 29 9 Ford Motor 10.50 Motor Vehicles 30 451 Motorola Solutions 10.49 Technology 31 179 Bank of New York Mellon Corp. 10.42 Financials 32 54 Cisco Systems 10.41 Technology 33 55 Pfizer 10.40 Health Care 34 120 Raytheon 10.34 Aerospace & Defense 35 13 Verizon 10.32 Telecommunications 36 91 Nike 10.26 Apparel

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 10

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

37 29 Citigroup 10.20 Financials 38 38 Target 10.19 Retail 39 34 Procter & Gamble 10.08 Household Products 40 81 Allstate 10.07 Financials 41 72 Merck 10.05 Health Care 42 14 Chevron 10.02 Energy 43 292 Charter Communications 9.91 Telecommunications 44 233 Computer Sciences 9.89 Technology 45 259 CBRE Group 9.84 Financials 46 138 Abbott Laboratories 9.75 Health Care 47 68 Delta Air Lines 9.75 Transportation 48 1 Walmart 9.73 Retail 49 152 Hartford Financial Services Group 9.62 Financials 50 156 AECOM 9.56 Engineering Construction 51 150 Xerox 9.49 Technology 52 148 Cummins 9.49 Industrials 53 254 Hilton Worldwide Holdings 9.48 Hotels, Resturants and Leisure 54 235 Jacobs Engineering Group 9.45 Engineering Construction 55 24 Boeing 9.44 Aerospace & Defense 56 8 General Motors 9.38 Motor Vehicles 57 70 Johnson Controls 9.37 Motor Vehicles 58 171 PNC Financial Services Group 9.34 Financials 59 349 Newmont Mining 9.33 Energy 60 48 UPS 9.30 Transportation 61 40 MetLife 9.29 Financials 62 400 Symantec 9.28 Technology 63 195 Marriott International 9.28 Hotels, Resturants and Leisure 64 251 WestRock 9.28 Materials 65 96 Twenty-First Century Fox 9.27 Media 66 59 Caterpillar 9.23 Industrials 67 2 Exxon Mobil 9.18 Energy 68 151 Kimberly-Clark 9.17 Household Products 69 69 Nationwide 9.07 Financials 70 44 PepsiCo 9.05 Food, Beverages and Tobacco 71 245 L-3 Communications 9.04 Aerospace & Defense 72 117 Halliburton 9.04 Energy 73 128 Emerson Electric 9.01 Industrials

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 11

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

74 386 salesforce.com 8.99 Technology 75 56 Dow Chemical 8.98 Chemicals 76 126 Arconic (formerly Alcoa) 8.93 Materials 77 478 CH2M Hill 8.90 Engineering Construction 78 264 State Street Corp. 8.89 Financials 79 155 Fluor 8.89 Engineering Construction 80 7 CVS Health 8.88 Food and Drug Stores 81 248 ADP 8.85 Business Services 82 286 Baxter International 8.84 Health Care 83 49 AIG 8.83 Financials 84 131 U.S. Bancorp 8.78 Financials 85 63 HCA Holdings 8.77 Health Care 86 105 Travelers Cos. 8.76 Financials 87 90 ConocoPhillips 8.75 Energy 88 287 Stryker 8.75 Health Care 89 80 United Continental Holdings 8.74 Transportation 90 52 Humana 8.71 Health Care 91 141 Eli Lilly 8.68 Health Care 92 409 NCR 8.65 Technology 93 132 Staples 8.62 Retail 94 482 Raymond James Financial 8.61 Financials 95 329 SunTrust Banks 8.60 Financials 96 189 Monsanto 8.59 Chemicals 97 97 Deere 8.52 Industrials 98 113 EMC 8.47 Technology 99 376 Fifth Third Bancorp 8.47 Financials 100 168 Bristol-Myers Squibb 8.46 Health Care 101 5 McKesson 8.46 Health Care 102 164 Thermo Fisher Scientific 8.46 Technology 103 161 General Mills 8.44 Food, Beverages and Tobacco 104 178 Baker Hughes 8.44 Energy 105 130 Amgen 8.41 Health Care 106 332 American Family Insurance Group 8.37 Financials 107 205 Lincoln National 8.35 Financials 108 294 MasterCard 8.35 Business Services 109 220 CDW 8.35 Technology 110 162 Southern 8.34 Energy 111 112 Capital One Financial 8.34 Financials

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 12

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

112 79 Cigna 8.30 Health Care 113 137 Progressive 8.28 Financials 114 172 Health Net 8.25 Health Care 115 192 National Oilwell Varco 8.24 Energy 116 447 Quintiles Transnational Holdings 8.23 Health Care 117 255 R.R. Donnelley & Sons 8.23 Media 118 382 Jones Financial 8.22 Financials 119 158 Jabil Circuit 8.21 Technology 120 253 Sherwin-Williams 8.21 Chemicals 121 95 Exelon 8.20 Energy 122 154 Lear 8.19 Motor Vehicles 123 239 CSX 8.19 Transportation 124 247 Entergy 8.17 Energy 125 199 Aramark 8.15 Business Services 126 492 Fiserv 8.12 Business Services 127 243 Dominion Resources 8.11 Energy 128 423 Graybar Electric 8.10 Wholesale 129 314 Peter Kiewit Sons’ 8.10 Engineering Construction 130 313 Corning 8.08 Technology 131 86 Gilead Sciences 8.07 Health Care 132 28 Home Depot 8.05 Retail 133 50 Prudential Financial 8.04 Financials 134 190 AES 8.01 Energy 135 224 Parker-Hannifin 7.99 Industrials 136 271 Reinsurance Group of America 7.98 Financials 137 333 Level 3 Communications 7.96 Telecommunications 138 406 Discovery Communications 7.96 Media 139 73 Liberty Mutual Insurance Group 7.95 Financials 140 206 Ecolab 7.95 Chemicals 141 41 Archer Daniels Midland 7.94 Food, Beverages and Tobacco 142 208 C.H. Robinson Worldwide 7.93 Transportation 143 134 Whirlpool 7.93 Industrials 144 46 Aetna 7.92 Health Care 145 43 Freddie Mac 7.91 Financials 146 497 First American Financial 7.91 Financials 147 6 UnitedHealth Group 7.88 Health Care 148 295 Applied Materials 7.88 Technology 149 450 Mattel 7.87 Household Products

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 13

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

150 21 Cardinal Health 7.85 Health Care 151 370 Avon Products 7.83 Household Products 152 269 Hertz Global Holdings 7.82 Retail 153 182 PPG Industries 7.81 Chemicals 154 288 Air Products & Chemicals 7.81 Chemicals 155 375 Sealed Air 7.80 Materials 156 465 St. Jude Medical 7.79 Health Care 157 207 Kellogg 7.79 Food, Beverages and Tobacco 158 124 Centene 7.79 Health Care 159 236 Principal Financial 7.77 Financials 160 100 Northwestern Mutual 7.77 Financials 161 140 Tenet Healthcare 7.77 Health Care 162 320 HD Supply Holdings 7.75 Wholesale 163 262 Praxair 7.72 Chemicals 164 102 Avnet 7.71 Wholesale 165 230 Cognizant Technology Solutions 7.70 Technology 166 66 Tyson Foods 7.69 Food, Beverages and Tobacco 167 127 International Paper 7.68 Materials 168 115 Duke Energy 7.66 Energy 169 490 Rockwell Collins 7.66 Aerospace & Defense 170 228 J.C. Penney 7.65 Retail 171 166 PG&E Corp. 7.64 Energy 172 373 Weyerhaeuser 7.63 Materials 173 169 Goodyear Tire & Rubber 7.62 Motor Vehicles 174 453 Celanese 7.60 Chemicals 175 444 Starwood Hotels & Resorts 7.59 Hotels, Resturants and Leisure 176 325 Laboratory Corp. of America 7.58 Health Care 177 103 Macy’s 7.58 Retail 178 226 Guardian Life Ins. Co. of America 7.57 Financials 179 15 Costco 7.56 Retail 180 285 W.W. Grainger 7.54 Wholesale 181 216 Devon Energy 7.53 Energy 182 272 Public Service Enterprise Group 7.51 Energy 183 378 Huntington Ingalls Industries 7.51 Aerospace & Defense 184 197 Nordstrom 7.49 Retail 185 47 Lowe’s 7.45 Retail 186 474 Insight Enterprises 7.43 Wholesale 187 225 Occidental Petroleum 7.43 Energy 188 229 Consolidated Edison 7.42 Energy

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 14

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

189 159 CenturyLink 7.42 Telecommunications 190 165 American Electric Power 7.42 Energy 191 218 Yum Brands 7.37 Hotels, Resturants and Leisure 192 278 Becton Dickinson 7.37 Health Care 193 174 Colgate-Palmolive 7.36 Household Products 194 146 Starbucks 7.36 Hotels, Resturants and Leisure 195 324 Anadarko Petroleum 7.36 Energy 196 422 NetApp 7.34 Technology 197 470 Visteon 7.33 Motor Vehicles 198 32 Valero Energy 7.29 Energy 199 250 BlackRock 7.27 Financials 200 196 Office Depot 7.26 Retail 201 110 Qualcomm 7.25 Technology 202 391 Anixter International 7.24 Wholesale 203 175 Freeport-McMoRan 7.17 Energy 204 311 Fidelity National Financial 7.14 Financials 205 160 Supervalu 7.13 Food and Drug Stores 206 466 Wyndham Worldwide 7.12 Hotels, Resturants and Leisure 207 467 Kelly Services 7.12 Business Services 208 194 Western Digital 7.11 Technology 209 488 Simon Property Group 7.11 Financials 210 436 Jones Lang LaSalle 7.09 Financials 211 204 Visa 7.08 Business Services 212 438 Marathon Oil 7.07 Energy 213 471 Arthur J. Gallagher 7.07 Financials 214 428 Dana Holding 7.07 Motor Vehicles 215 200 DaVita HealthCare Partners 7.07 Health Care 216 396 Terex 7.06 Industrials 217 319 Cameron International 7.06 Energy 218 274 DTE Energy 7.05 Energy 219 221 Waste Management 7.05 Business Services 220 99 Time Warner 7.04 Media 221 385 Expedia 7.03 Technology 222 394 Hess 7.00 Energy 223 405 JetBlue Airways 6.98 Transportation 224 397 Coca-Cola European Partners 6.97 Food, Beverages and Tobacco 225 119 Arrow Electronics 6.96 Wholesale 226 198 Kinder Morgan 6.95 Energy 227 366 Live Nation Entertainment 6.95 Media

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 15

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

228 358 Quest Diagnostics 6.92 Health Care 229 64 Ingram Micro 6.92 Wholesale 230 306 Genworth Financial 6.91 Financials 231 114 USAA 6.91 Financials 232 12 AmerisourceBergen 6.90 Health Care 233 435 Avery Dennison 6.88 Materials 234 401 Charles Schwab 6.87 Financials 235 341 Ball 6.86 Materials 236 472 Host Hotels & Resorts 6.86 Financials 237 443 Windstream Holdings 6.83 Telecommunications 238 381 EMCOR Group 6.83 Engineering Construction 239 408 Sanmina 6.82 Technology 240 177 Gap 6.82 Retail 241 390 Expeditors International of Washington 6.81 Transportation 242 249 First Data 6.81 Business Services 243 331 Broadcom 6.81 Technology 244 261 Estee Lauder 6.81 Household Products 245 410 FMC Technologies 6.79 Energy 246 136 AutoNation 6.76 Retail 247 336 Dean Foods 6.75 Food, Beverages and Tobacco 248 107 Rite Aid 6.75 Food and Drug Stores 249 173 Micron Technology 6.74 Technology 250 464 SanDisk 6.71 Technology 251 108 Tech Data 6.71 Wholesale 252 231 VF 6.68 Apparel 253 364 Williams 6.68 Energy 254 468 Western Union 6.68 Business Services 255 270 Norfolk Southern 6.68 Transportation 256 275 Assurant 6.62 Financials 257 176 ConAgra Foods 6.62 Food, Beverages and Tobacco 258 499 Cincinnati Financial 6.62 Financials 259 265 Unum Group 6.60 Financials 260 33 Anthem 6.58 Health Care 261 16 Fannie Mae 6.57 Financials 262 371 Darden Restaurants 6.57 Hotels, Resturants and Leisure 263 310 Autoliv 6.56 Motor Vehicles 264 392 Fidelity National Information Services 6.51 Business Services 265 125 Community Health Systems 6.50 Health Care 266 129 Union Pacific 6.50 Transportation

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 16

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

267 215 Land O’Lakes 6.48 Food, Beverages and Tobacco 268 493 Spectra Energy 6.47 Energy 269 290 Universal Health Services 6.46 Health Care 270 403 CMS Energy 6.46 Energy 271 296 Eastman Chemical 6.44 Chemicals 272 260 D.R. Horton 6.43 Engineering Construction 273 22 Express Scripts Holding 6.43 Health Care 274 147 Paccar 6.41 Motor Vehicles 275 257 Xcel Energy 6.40 Energy 276 480 Owens Corning 6.40 Materials 277 399 Cablevision Systems 6.39 Telecommunications 278 419 Harman International Industries 6.37 Industrials 279 301 Lennar 6.37 Engineering Construction 280 61 New York Life Insurance 6.36 Financials 281 240 Toys “R” Us 6.35 Retail 282 357 WESCO International 6.32 Wholesale 283 346 Lithia Motors 6.32 Retail 284 305 Celgene 6.32 Health Care 285 213 Viacom 6.29 Media 286 395 Ryder System 6.29 Transportation 287 281 Navistar International 6.28 Motor Vehicles 288 149 Altria Group 6.27 Food, Beverages and Tobacco 289 425 Ameren 6.27 Energy 290 432 Harley-Davidson 6.27 Transportation 291 455 Clorox 6.25 Household Products 292 101 DuPont 6.25 Chemicals 293 486 Citizens Financial Group 6.25 Financials 294 17 Kroger 6.24 Food and Drug Stores 295 298 Ally Financial 6.22 Financials 296 363 CenterPoint Energy 6.18 Energy 297 304 Hormel Foods 6.17 Food, Beverages and Tobacco 298 76 Massachusetts Mutual Life Insurance 6.17 Financials 299 106 Philip Morris International 6.16 Food, Beverages and Tobacco 300 268 Henry Schein 6.14 Health Care 301 241 Las Vegas Sands 6.13 Hotels, Resturants and Leisure 302 104 Enterprise Products Partners 6.10 Energy 303 372 Kindred Healthcare 6.10 Health Care 304 459 Alaska Air Group 6.09 Transportation 305 316 Mosaic 6.09 Chemicals

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 17

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

306 416 J.B. Hunt Transport Services 6.08 Transportation 307 441 HRG Group 6.07 Household Products 308 337 Campbell Soup 6.07 Food, Beverages and Tobacco 309 135 Aflac 6.06 Financials 310 143 Penske Automotive Group 6.06 Retail 311 404 Alliance Data Systems 6.05 Business Services 312 42 Marathon Petroleum 6.05 Energy 313 256 Stanley Black & Decker 6.04 Household Products 314 389 Spirit AeroSystems Holdings 6.04 Aerospace & Defense 315 413 Dr Pepper Snapple Group 6.03 Food, Beverages and Tobacco 316 326 Pacific Life 6.00 Financials 317 323 Veritiv 6.00 Wholesale 318 433 PulteGroup 5.99 Engineering Construction 319 411 Erie Insurance Group 5.96 Financials 320 244 United States Steel 5.94 Materials 321 338 Mohawk Industries 5.94 Household Products 322 367 Mutual of Omaha Insurance 5.93 Financials 323 334 Tenneco 5.93 Motor Vehicles 324 440 United Rentals 5.93 Business Services 325 430 LifePoint Health 5.90 Health Care 326 489 Domtar 5.89 Materials 327 318 Thrivent Financial for Lutherans 5.89 Financials 328 339 BorgWarner 5.88 Motor Vehicles 329 188 FirstEnergy 5.88 Energy 330 483 NiSource 5.85 Energy 331 312 Republic Services 5.85 Business Services 332 227 Farmers Insurance Exchange 5.82 Financials 333 369 LKQ 5.81 Wholesale 334 258 Murphy USA 5.81 Retail 335 322 EOG Resources 5.81 Energy 336 277 Huntsman 5.81 Chemicals 337 351 SpartanNash 5.81 Wholesale 338 452 J.M. Smucker 5.81 Food, Beverages and Tobacco 339 348 Oneok 5.79 Energy 340 437 WEC Energy Group 5.78 Energy 341 308 Priceline Group 5.77 Technology 342 402 Calpine 5.76 Energy 343 476 Markel 5.76 Financials 344 458 Peabody Energy 5.70 Energy

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 18

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

345 202 WellCare Health Plans 5.69 Health Care 346 417 Commercial Metals 5.69 Materials 347 335 United Natural Foods 5.69 Wholesale 348 89 TJX 5.69 Retail 349 362 Hershey 5.68 Food, Beverages and Tobacco 350 280 AutoZone 5.67 Retail 351 4 Berkshire Hathaway 5.67 Financials 352 434 Newell Brands 5.66 Household Products 353 484 Airgas 5.63 Wholesale 354 237 Ross Stores 5.58 Retail 355 201 Molina Healthcare 5.53 Health Care 356 191 CarMax 5.52 Retail 357 209 Textron 5.52 Aerospace & Defense 358 481 S&P Global 5.48 Business Services 359 388 Apache 5.45 Energy 360 98 Tesoro 5.44 Energy 361 185 Performance Food Group 5.44 Wholesale 362 350 PPL 5.44 Energy 363 485 ABM Industries 5.43 Business Services 364 330 Avis Budget Group 5.42 Retail 365 144 ManpowerGroup 5.41 Business Services 366 65 Energy Transfer Equity 5.38 Energy 367 212 Synnex 5.37 Wholesale 368 193 NRG Energy 5.36 Energy 369 293 Advance Auto Parts 5.33 Retail 370 340 PVH 5.32 Apparel 371 360 AGCO 5.32 Industrials 372 266 Reynolds American 5.31 Food, Beverages and Tobacco 373 418 Owens-Illinois 5.30 Materials 374 31 IBM 5.29 Technology 375 380 Dillard’s 5.29 Retail 376 361 Foot Locker 5.26 Retail 377 170 Nucor 5.26 Materials 378 446 Packaging Corp. of America 5.26 Materials 379 457 Genesis Healthcare 5.26 Health Care 380 303 Reliance Steel & Aluminum 5.24 Materials 381 139 Dollar General 5.24 Retail 382 283 Discover Financial Services 5.23 Financials 383 223 Chesapeake Energy 5.21 Energy

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 19

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

384 291 Owens & Minor 5.21 Health Care 385 453 Regions Financial 5.19 Financials 386 183 Genuine Parts 5.18 Wholesale 387 203 CBS 5.15 Media 388 302 GameStop 5.13 Retail 389 282 Precision Castparts 5.12 Aerospace & Defense 390 500 Burlington Stores 5.11 Retail 391 327 News Corp. 5.10 Media 392 84 CHS 5.07 Food, Beverages and Tobacco 393 498 NVR 5.06 Engineering Construction 394 355 Interpublic Group 5.06 Business Services 395 495 Big Lots 5.06 Retail 396 343 Eversource Energy 5.04 Energy 397 472 Ashland 5.01 Chemicals 398 309 MGM Resorts International 4.99 Hotels, Resturants and Leisure 399 180 Dollar Tree 4.99 Retail 400 449 Realogy Holdings 4.89 Financials 401 491 Lam Research 4.84 Technology 402 45 United Technologies 4.84 Aerospace & Defense 403 368 W.R. Berkley 4.83 Financials 404 116 Time Warner Cable 4.77 Telecommunications 405 222 Marsh & McLennan 4.76 Financials 406 163 NextEra Energy 4.76 Energy 407 469 Envision Healthcare Holdings 4.75 Health Care 408 279 Sempra Energy 4.72 Energy 409 342 O’Reilly Automotive 4.71 Retail 410 415 Tractor Supply 4.68 Retail 411 321 Crown Holdings 4.66 Materials 412 92 World Fuel Services 4.66 Wholesale 413 412 Rockwell Automation 4.65 Industrials 414 383 AK Steel Holding 4.63 Materials 415 347 KKR 4.61 Financials 416 111 Sears Holdings 4.59 Retail 417 424 Oshkosh 4.53 Motor Vehicles 418 19 Walgreens Boots Alliance 4.50 Food and Drug Stores 419 354 Ralph Lauren 4.45 Apparel 420 407 Trinity Industries 4.45 Transportation 421 479 Western & Southern Financial Group 4.42 Financials 422 475 Energy Future Holdings 4.42 Energy

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 20

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

423 398 Auto-Owners Insurance 4.42 Financials 424 121 Plains GP Holdings 4.41 Energy 425 93 3M 4.38 Industrials 426 252 Voya Financial 4.35 Financials 427 23 J.P. Morgan Chase 4.32 Financials 428 317 Core-Mark Holding 4.23 Wholesale 429 345 Masco 4.22 Household Products 430 214 HollyFrontier 4.22 Energy 431 211 Illinois Tool Works 4.18 Industrials 432 87 Publix Super Markets 4.18 Food and Drug Stores 433 133 Danaher 4.16 Technology 434 267 Group 1 Automotive 4.16 Retail 435 297 Sonic Automotive 4.13 Retail 436 276 Global Partners 4.13 Wholesale 437 387 Targa Resources 4.07 Energy 438 439 TravelCenters of America 4.05 Retail 439 496 Telephone & Data Systems 4.03 Telecommunications 440 352 Quanta Services 3.94 Engineering Construction 441 429 Constellation Brands 3.90 Food, Beverages and Tobacco 442 289 Western Refining 3.89 Energy 443 384 UGI 3.87 Energy 444 356 Steel Dynamics 3.78 Materials 445 210 Loews 3.76 Financials 446 273 BB&T Corp. 3.73 Financials 447 186 Omnicom Group 3.55 Business Services 448 187 DISH Network 3.54 Telecommunications 449 217 PBF Energy 3.54 Energy 450 238 Bed Bath & Beyond 3.51 Retail 451 122 US Foods Holding 3.51 Wholesale 452 393 Asbury Automotive Group 3.47 Retail 453 83 INTL FCStone 3.46 Financials 454 118 Northrop Grumman 3.44 Aerospace & Defense 455 421 American Financial Group 3.42 Financials 456 487 Booz Allen Hamilton Holding 3.40 Technology 457 328 Jarden 3.38 Household Products 458 463 Lansing Trade Group 3.29 Wholesale 459 374 Casey’s General Stores 3.28 Retail 460 344 Franklin Resources 3.26 Financials 461 263 Biogen 3.25 Health Care

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 21

Fortune Darknet DARKINT 500 Index Rank Rank Company Name Score Company Sector

462 377 Dover 3.12 Industrials 463 142 Southwest Airlines 3.03 Transportation 464 39 Johnson & Johnson 2.85 Health Care 465 427 Barnes & Noble 2.85 Retail 466 462 Amphenol 2.82 Technology 467 62 Coca-Cola 2.80 Food, Beverages and Tobacco 468 88 General Dynamics 2.69 Aerospace & Defense 469 181 Whole Foods Market 2.62 Food and Drug Stores 470 234 L Brands 2.59 Retail 471 94 Mondelez International 2.58 Food, Beverages and Tobacco 472 299 CST Brands 2.50 Retail 473 109 McDonald’s 2.38 Hotels, Resturants and Leisure 474 431 Zimmer Biomet Holdings 2.35 Health Care 475 246 Edison International 2.17 Energy 476 232 Ameriprise Financial 2.12 Financials 477 477 Essendant 2.12 Wholesale 478 445 Delek US Holdings 2.03 Energy 479 315 Univar 1.98 Wholesale 480 442 Old Republic International 1.96 Financials 481 420 Baxalta 1.92 Health Care 482 448 Hanesbrands 1.87 Apparel 483 167 NGL Energy Partners 1.80 Wholesale 484 365 Dick’s Sporting Goods 1.80 Retail 485 494 Navient 1.56 Financials 486 284 Liberty Interactive 1.39 Technology 487 30 Phillips 66 1.34 Energy 488 184 Icahn Enterprises 1.34 Financials 489 153 Kraft Heinz 1.21 Food, Beverages and Tobacco 490 57 Sysco 1.04 Wholesale 491 242 Leucadia National 0.82 Food, Beverages and Tobacco 492 353 XPO Logistics 0.82 Transportation 493 359 Boston Scientific 0.82 Health Care 494 426 A-Mark Precious Metals 0.82 Materials 495 456 Ingredion 0.82 Food, Beverages and Tobacco 496 414 iHeartMedia 0.68 Media 497 460 Seaboard 0.58 Food, Beverages and Tobacco 498 82 TIAA 0.52 Financials 499 123 AbbVie 0.52 Health Care 500 145 Kohl’s 0.52 Retail

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231 OWL CYBERSECURITY DARKNET INDEX: FORTUNE 500 PAGE 22

About OWL Cybersecurity

OWL Cybersecurity is based in Denver, Colorado providing darknet threat intelligence data and services to allow companies and organizations to understand and mitigate their digital risks. OWL Cybersecurity’s data platform allows companies to see in real-time the theft, breach or other compromise of their proprietary data on the darknet, allowing them to both mitigate damage prior to the information being misused and to highlight gaps in their cybersecurity perimeter.

This database is believed to be the largest database of darknet content available to commercial users. OWL Cybersecurity complements this with a full range of cybersecurity consulting services, including security assessments, penetration testing, application and code review, incident response, and digital forensics.

OWL CYBERSECURITY OWLCYBER.COM 303-234-1231