Comparison Overview

Banorte

VS

ING

Banorte

Prolongación Paseo de la Reforma, 1230, Cuajimalpa de Morelos, Mexico City, MX, 05349
Last Update: 2025-12-17
Between 750 and 799

Bienvenido al perfil oficial de Banorte. El Banco Fuerte de México.

NAICS: 52211
NAICS Definition: Commercial Banking
Employees: 4,924
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

ING

Bijlmerdreef 106, Amsterdam, North Holland, NL, 1102 CT
Last Update: 2025-12-17
Between 800 and 849

ING is a pioneer in digital banking and on the forefront as one of the most innovative banks in the world. As ING, we have a clear purpose that represents our conviction of people’s potential. We don’t judge, coach, or tell people how to live their lives. However big or small, modest or grand, we empower people and businesses to realise their vision for a better future. We made the promise to make banking frictionless, removing barriers to progress, and make people confident in their financial decisions. As a global bank we have a huge opportunity – and responsibility – to make an impact for the better. We can play a role by financing change, sharing knowledge, and innovating. Being sustainable is in all the choices we make—as a lender, as a partner and through the services we offer our customers

NAICS: 52211
NAICS Definition: Commercial Banking
Employees: 50,780
Subsidiaries: 8
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/banorte.jpeg
Banorte
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/ing.jpeg
ING
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Banorte
100%
Compliance Rate
0/4 Standards Verified
ING
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Banking Industry Average (This Year)

No incidents recorded for Banorte in 2025.

Incidents vs Banking Industry Average (This Year)

No incidents recorded for ING in 2025.

Incident History — Banorte (X = Date, Y = Severity)

Banorte cyber incidents detection timeline including parent company and subsidiaries

Incident History — ING (X = Date, Y = Severity)

ING cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/banorte.jpeg
Banorte
Incidents

Date Detected: 6/2014
Type:Data Leak
Blog: Blog
https://images.rankiteo.com/companyimages/ing.jpeg
ING
Incidents

No Incident

FAQ

ING company demonstrates a stronger AI Cybersecurity Score compared to Banorte company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Banorte company has historically faced a number of disclosed cyber incidents, whereas ING company has not reported any.

In the current year, ING company and Banorte company have not reported any cyber incidents.

Neither ING company nor Banorte company has reported experiencing a ransomware attack publicly.

Neither ING company nor Banorte company has reported experiencing a data breach publicly.

Neither ING company nor Banorte company has reported experiencing targeted cyberattacks publicly.

Neither Banorte company nor ING company has reported experiencing or disclosing vulnerabilities publicly.

Neither Banorte nor ING holds any compliance certifications.

Neither company holds any compliance certifications.

ING company has more subsidiaries worldwide compared to Banorte company.

ING company employs more people globally than Banorte company, reflecting its scale as a Banking.

Neither Banorte nor ING holds SOC 2 Type 1 certification.

Neither Banorte nor ING holds SOC 2 Type 2 certification.

Neither Banorte nor ING holds ISO 27001 certification.

Neither Banorte nor ING holds PCI DSS certification.

Neither Banorte nor ING holds HIPAA certification.

Neither Banorte nor ING holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Risk Information
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X