Clop Ransomware Campaign
High severity · Security
Canon confirmed it was targeted in a massive Clop ransomware campaign exploiting a zero-day in Oracle E-Business Suite.
Vendor dossier // cbps.canon.com
Also known as Canon Business Process Services, Inc. · CBPS
New York City, United States · 1001-5000 employees
Key people
Last updated: Aug 19, 2026, 04:35 AM · Partial / limited public data
Elevated risk
Conditional
The vendor is assessed as Elevated Risk due to a history of significant data breaches involving sensitive employee and client data, resulting in class-action… Limited public data - verify before relying.
Higher score = greater risk. How we score
Risk Score
Research Coverage
Partial
Evidence Quality
The vendor has experienced multiple significant security incidents. In February 2020, a data breach compromised the sensitive information of thousands of current and former General Electric employees. In 2021, a ransomware attack led to a class-action lawsuit in the U.S. District Court for the Eastern District of New York. A settlement for this litigation, affecting approximately 10,300 employees, received initial approval in August 2022 and preliminary approval in November 2023. In November 2025, Canon confirmed it was targeted in a Clop ransomware campaign exploiting a zero-day in Oracle E-Business Suite. The parent company, Canon U.S.A., promotes a '5 Pillars of Security' framework for its devices and services.
Clop Ransomware Campaign
High severity · Security
Canon confirmed it was targeted in a massive Clop ransomware campaign exploiting a zero-day in Oracle E-Business Suite.
Preliminary Settlement Approval
Elevated severity · Legal
Court granted preliminary approval to a settlement resolving class action filed against Canon U.S.A. and other Canon companies over a ransomware attack.
Settlement Approval for GE Breach
Elevated severity · Legal
Data breach settlement affecting 10,300 employees won initial approval, including $3,500 per class member.
Ransomware Attack
High severity · Security
Canon was hit with a ransomware attack leading to a class action lawsuit in the U.S. District Court for the Eastern District of New York.
Class Action Lawsuit for 2020 Breach
Elevated severity · Legal
A class action was filed over the February 2020 data breach.
GE Employee Data Breach
High severity · Security
A data breach compromised sensitive information of thousands of current and former General Electric employees.
[leadership] Dominic Janney Appointed CEO of Canon Financial Services
Canon U.S.A. appointed Dominic Janney as Chief Executive Officer of Canon Financial Services.
Jul 21, 2026, 12:00 AM · Source
[breach] Clop Ransomware Campaign
Canon confirmed it was targeted in a massive Clop ransomware campaign exploiting a zero-day in Oracle E-Business Suite.
Nov 25, 2025, 12:00 AM · Source
[legal] Preliminary Settlement Approval
Court granted preliminary approval to a settlement resolving class action filed against Canon U.S.A. and other Canon companies over a ransomware attack.
Nov 21, 2023, 12:00 AM · Source
[legal] Settlement Approval for GE Breach
Data breach settlement affecting 10,300 employees won initial approval, including $3,500 per class member.
Aug 25, 2022, 12:00 AM · Source
Deterministic outside-in checks run directly against the vendor's domain - not inferred from press or marketing pages.
Last observed: Aug 19, 2026, 04:35 AM
TLS certificate
Certificate expires in 190 days
Security headers
5/6 security headers present
Email authentication (SPF / DMARC)
Canon Business Process Services (CBPS) is a U.S.-based outsourcing and offshoring services provider operating as a wholly owned subsidiary of Canon U.S.A., Inc. . Headquartered in New York City, the firm employs between 1,001 and 5,000 people and serves enterprise clients with scalable process improvements . The company leverages Six Sigma expertise and technology to help organizations achieve business agility and digital transformation . It has been recognized as a Global Outsourcing 100 Leader by IAOP for 19 consecutive years . CBPS operates with professionals located across the United States and in the Philippines .
CBPS provides managed services and technology designed to boost operational efficiency while reducing risk and cost . Its scope includes business process outsourcing functions such as accounts payable, document imaging, records and information management, print and mail, office services, and eDiscovery and litigation support . The company applies quality management principles to lift business performance . Competitors in this space include Iron Mountain, Conduent, Ricoh, Xerox, HCL Tech, Cognizant, Exela Technologies, Wipro, TTEC, and Genpact.
Recent news highlights legal and security developments. A class-action lawsuit regarding the 2020 data breach affecting General Electric employees was filed in April 2020. Another class-action suit followed a 2021 ransomware attack. Settlements for these breaches received court approvals in 2022 and 2023. In November 2025, reports confirmed Canon was impacted by the Clop ransomware campaign targeting Oracle E-Business Suite vulnerabilities. Leadership changes include the appointment of Dominic Janney as CEO of Canon Financial Services in July 2026 .
Fourth parties this vendor relies on - subprocessors, infrastructure, and integrations surfaced from public sources.
Oracle
Vendors offering a similar product or service - for side-by-side comparison, not a ranking.
Iron Mountain
Competitor in records management and outsourcing.
Conduent
Competitor in business process outsourcing.
Ricoh
Competitor in managed print and IT services.
Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.
Risk delta is hidden until two stored snapshots can be compared.
Targeted questions are generated only from unanswered or conflicting controls. The full SIG-lite questionnaire remains on its own route.
29 sources · Generated Aug 19, 2026, 04:35 AM
Every verdict stores the public sources retrieved for this run. Read our methodology.
Input sources · retrieved Aug 19, 2026, 04:35 AM
Canon Business Process Services Company Overview ... - LeadIQ
Company
Canon Financial Services, Inc. Company Overview, Contact Details & Competitors | LeadIQ
Company
AI-generated assessment based on publicly available sources. Verify critical findings before contractual reliance. Analysis is advisory, not a compliance attestation, and is subject to data availability.
Last assessed
Aug 19, 2026, 04:35 AM
Material findings
6
Years in business: -. Material incidents: 6.
The vendor is assessed as Elevated Risk due to a history of significant data breaches involving sensitive employee and client data, resulting in class-action lawsuits and settlements. While the most recent major incidents occurred over 12 months ago and settlements have been approved, the volume of compromised personally identifiable information (PII) and the ongoing legal context warrant caution. Public security posture details specific to the BPS subsidiary are limited compared to the parent company.
No workspace decision recorded for this assessment yet.
The system recommendation is above.
[breach] Ransomware Attack
Canon was hit with a ransomware attack leading to a class action lawsuit in the U.S. District Court for the Eastern District of New York.
Jan 8, 2021, 12:00 AM · Source
[legal] Class Action Lawsuit for 2020 Breach
A class action was filed over the February 2020 data breach.
Apr 10, 2020, 12:00 AM · Source
[breach] GE Employee Data Breach
A data breach compromised sensitive information of thousands of current and former General Electric employees.
Feb 1, 2020, 12:00 AM · Source
DNS presence
Certificate transparency exposure
crt.sh unavailable
Breach database (HIBP)
Public status page
Public status page reachable
Canon Business Process Services Employee Directory, Headcount & Staff | LeadIQ
Company
Leadership in BPO Services, Mailroom Outsourcing, Accounts Payable | Canon
Company
Canon Business Process Services Email Formats & Email Address Examples | LeadIQ
Company
Canon Information Technology Services, Inc. Company Overview, Contact Details & Competitors | LeadIQ
Product
Top LeadIQ Alternatives and Competitors
Product
Canon Business Process Services Competitors & Alternatives (2026)
Product
Top Canon Competitors & Similar Companies | MBA Skool
Product
Top 10 Canon Managed Print Services Alternatives & Competitors
Product
We’re celebrating LeadIQ’s SOC 2 Type II certification (and why you should too)
Security & risk
Canon Data Breach Brings Class Action Lawsuit - Copier Careers
News
Canon Faces Data Breach Class Action Suit from Employees
News
Canon Allegedly Breached by Clop Ransomware
News
Canon Business | Canon U.S.A., Inc.
News
Canon Business Process Services, Inc. | The ClassAction.org Legal News Wire | Breaking Class Action Lawsuit & Settlement News
News
Canon Hit with Data Breach Class Action Suit by Former ...
News
Canon Business, GE Data Breach Deal Wins Initial Approval
News
IN RE: CANON U.S.A. DATA BREACH LITIGATON (2023) | FindLaw
News
Canon Says Subsidiary Impacted by Oracle EBS Hack - SecurityWeek
News
Court Grants Preliminary Approval to Settlement in Canon ...
News
Canon Business Services ANZ Company Overview, Contact Details & Competitors | LeadIQ
official
Canon EMEA Company Overview, Contact Details & Competitors | LeadIQ
official
Canon Business Process Services Company Overview, Contact Details & Competitors | LeadIQ
official
Canon Nederland N.V. Company Overview, Contact Details & Competitors | LeadIQ
official
ProSource Company Overview, Contact Details & Competitors | LeadIQ
official
Business Machines Systems Company Overview, Contact Details & Competitors | LeadIQ
official
Canon Medical Research USA, Inc. Company Overview, Contact Details & Competitors | LeadIQ
official
Top Office Company Overview, Contact Details & Competitors | LeadIQ
official