Comparison Overview

Banorte

VS

BBVA

Banorte

Prolongación Paseo de la Reforma, 1230, Cuajimalpa de Morelos, Mexico City, MX, 05349
Last Update: 2025-12-17
Between 750 and 799

Bienvenido al perfil oficial de Banorte. El Banco Fuerte de México.

NAICS: 52211
NAICS Definition: Commercial Banking
Employees: 4,924
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

BBVA

Plaza de San Nicolas 4, Bilbao, Vizcaya, 48005, ES
Last Update: 2025-12-17

At BBVA we are leading the transformation of banking worldwide, united in pursuing our goal of bringing the age of opportunity to everyone. Firmly focused on the future, our on-going digital transformation is already producing disruptive innovations that power our vision of banking. Every one of our 121,486 employees, from branch staff to senior leaders, plays an essential role in giving our 71.5 million customers the cutting edge banking solutions that they deserve. Building on 166 years of history we know the importance of constant development, which is why we place so much confidence in the collaborative working environment that enables our people to grow and excel. If you would like to learn about the culture and opportunities on offer at a company that is leading the way for 21st century banking, head to the ‘Life’ tab to find out more.

NAICS: 52211
NAICS Definition: Commercial Banking
Employees: 119,358
Subsidiaries: 11
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/banorte.jpeg
Banorte
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/bbva.jpeg
BBVA
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Banorte
100%
Compliance Rate
0/4 Standards Verified
BBVA
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Banking Industry Average (This Year)

No incidents recorded for Banorte in 2025.

Incidents vs Banking Industry Average (This Year)

No incidents recorded for BBVA in 2025.

Incident History — Banorte (X = Date, Y = Severity)

Banorte cyber incidents detection timeline including parent company and subsidiaries

Incident History — BBVA (X = Date, Y = Severity)

BBVA cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/banorte.jpeg
Banorte
Incidents

Date Detected: 6/2014
Type:Data Leak
Blog: Blog
https://images.rankiteo.com/companyimages/bbva.jpeg
BBVA
Incidents

No Incident

FAQ

BBVA company demonstrates a stronger AI Cybersecurity Score compared to Banorte company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Banorte company has historically faced a number of disclosed cyber incidents, whereas BBVA company has not reported any.

In the current year, BBVA company and Banorte company have not reported any cyber incidents.

Neither BBVA company nor Banorte company has reported experiencing a ransomware attack publicly.

Neither BBVA company nor Banorte company has reported experiencing a data breach publicly.

Neither BBVA company nor Banorte company has reported experiencing targeted cyberattacks publicly.

Neither Banorte company nor BBVA company has reported experiencing or disclosing vulnerabilities publicly.

Neither Banorte nor BBVA holds any compliance certifications.

Neither company holds any compliance certifications.

BBVA company has more subsidiaries worldwide compared to Banorte company.

BBVA company employs more people globally than Banorte company, reflecting its scale as a Banking.

Neither Banorte nor BBVA holds SOC 2 Type 1 certification.

Neither Banorte nor BBVA holds SOC 2 Type 2 certification.

Neither Banorte nor BBVA holds ISO 27001 certification.

Neither Banorte nor BBVA holds PCI DSS certification.

Neither Banorte nor BBVA holds HIPAA certification.

Neither Banorte nor BBVA holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Risk Information
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X