Comparison Overview

Air Canada

VS

China Eastern Airlines, North America

Air Canada

7373 Cote Vertu, Saint Laurent in Montreal, Quebec, H4S 1Z3, CA
Last Update: 2025-12-11

Canada's largest airline, the country’s flag carrier and a founding member of Star Alliance, the world's most comprehensive air transportation network celebrating its 25thanniversary in 2022, Air Canada provides scheduled passenger service directly to 51 airports in Canada, 51 in the United States and 86 internationally. It is the only international network carrier in North America to receive a Four-Star ranking from Skytrax, which in 2021 gave Air Canada awards for the Best Airline Staff in North America, Best Airline Staff in Canada, Best Business Class Lounge in North America, and an excellence award for its management of the COVID-19 pandemic. ** Air Canada est la plus importante société aérienne du Canada, le transporteur national du pays et un membre cofondateur du réseau Star Alliance — le plus vaste regroupement mondial de sociétés aériennes, qui célèbre son 25e anniversaire en 2022. Les lignes passagers régulières d’Air Canada relient sans escale 51 aéroports au Canada, 51 aux États-Unis et 86 sur le reste du globe. En Amérique du Nord, Air Canada constitue le seul transporteur aérien d’envergure internationale offrant une gamme complète de services à détenir la cote quatre étoiles de Skytrax qui, en 2021, lui a décerné les prix Meilleur personnel au sol et à bord en Amérique du Nord, Meilleur personnel au sol et à bord au Canada, Meilleur salon de classe affaires en Amérique du Nord ainsi qu’un Prix d’excellence pour sa gestion de la pandémie de la COVID-19.

NAICS: 481
NAICS Definition: Air Transportation
Employees: 22,919
Subsidiaries: 2
12-month incidents
0
Known data breaches
1
Attack type number
1

China Eastern Airlines, North America

Hongqiao International Airport Shanghai, CN
Last Update: 2025-12-09
Between 750 and 799

As one of the three major air carriers in China, headquartered in Shanghai, China Eastern Airlines operates 111 domestic and overseas branches across the globe. Flying a fleet of 730 aircraft which is one of the youngest fleets in major airlines worldwide. Moreover, it boasts the largest-scale in-flight Wi-Fi wide-bodied fleet with leading commercial and technical models in China. The annual passenger turnover of CEA exceeds more than 130 million, ranking top 10 among global airlines As an official member of SkyTeam, China Eastern has extended its flight network from Shanghai to 1036 cities in 170 countries via close cooperation with alliance members. Frequent Flyer of Eastern Miles are privileged with 790 lounges worldwide within all 19 SkyTeam member airlines. China Eastern serves non-stop flights from Los Angeles, New York, San Francisco, Chicago, Vancouver and Toronto to Shanghai, along with the comprehensive flight network covering more than 110 cities in China, connecting Asia, Europe and Oceania. Focusing on providing high-quality aviation transport service, China Eastern has won awards at home and abroad in the fields of operation quality, service experience, CSR, etc., including the Flight Safety Diamond Award by CAAC - the highest flight safety award in China, nine consecutive years of Top 50 Most Valuable Chinese Brands by the Brand Rating Agency WPP, four consecutive years’ nomination of “Global Top 500 Most Valuable Brand” by UK's Brand Rating Agency - Brand Finance, two consecutive years of Top 20 Chinese Enterprises Global Image Award-ranking first in the transportation industry. Additionally, China Eastern got the A rating in the latest ESG (Environmental, Social and Governance) criteria and listed the first place along with other five airlines, according to global index compiler MSCI.

NAICS: 481
NAICS Definition: Air Transportation
Employees: 10,001
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/air-canada.jpeg
Air Canada
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/china-eastern-airlines-north-america.jpeg
China Eastern Airlines, North America
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Air Canada
100%
Compliance Rate
0/4 Standards Verified
China Eastern Airlines, North America
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Airlines and Aviation Industry Average (This Year)

No incidents recorded for Air Canada in 2025.

Incidents vs Airlines and Aviation Industry Average (This Year)

No incidents recorded for China Eastern Airlines, North America in 2025.

Incident History — Air Canada (X = Date, Y = Severity)

Air Canada cyber incidents detection timeline including parent company and subsidiaries

Incident History — China Eastern Airlines, North America (X = Date, Y = Severity)

China Eastern Airlines, North America cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/air-canada.jpeg
Air Canada
Incidents

Date Detected: 09/2023
Type:Breach
Attack Vector: Unauthorized access to internal system
Motivation: Unspecified
Blog: Blog
https://images.rankiteo.com/companyimages/china-eastern-airlines-north-america.jpeg
China Eastern Airlines, North America
Incidents

No Incident

FAQ

China Eastern Airlines, North America company demonstrates a stronger AI Cybersecurity Score compared to Air Canada company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Air Canada company has historically faced a number of disclosed cyber incidents, whereas China Eastern Airlines, North America company has not reported any.

In the current year, China Eastern Airlines, North America company and Air Canada company have not reported any cyber incidents.

Neither China Eastern Airlines, North America company nor Air Canada company has reported experiencing a ransomware attack publicly.

Air Canada company has disclosed at least one data breach, while the other China Eastern Airlines, North America company has not reported such incidents publicly.

Neither China Eastern Airlines, North America company nor Air Canada company has reported experiencing targeted cyberattacks publicly.

Neither Air Canada company nor China Eastern Airlines, North America company has reported experiencing or disclosing vulnerabilities publicly.

Neither Air Canada nor China Eastern Airlines, North America holds any compliance certifications.

Neither company holds any compliance certifications.

Air Canada company has more subsidiaries worldwide compared to China Eastern Airlines, North America company.

Air Canada company employs more people globally than China Eastern Airlines, North America company, reflecting its scale as a Airlines and Aviation.

Neither Air Canada nor China Eastern Airlines, North America holds SOC 2 Type 1 certification.

Neither Air Canada nor China Eastern Airlines, North America holds SOC 2 Type 2 certification.

Neither Air Canada nor China Eastern Airlines, North America holds ISO 27001 certification.

Neither Air Canada nor China Eastern Airlines, North America holds PCI DSS certification.

Neither Air Canada nor China Eastern Airlines, North America holds HIPAA certification.

Neither Air Canada nor China Eastern Airlines, North America holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X