Comparison Overview

Bath & Body Works

VS

Chico's FAS, Inc.

Bath & Body Works

Columbus, Ohio, US, 43068
Last Update: 2025-12-09
View Profile
Between 750 and 799
https://www.bbwinc.com/about-us

We were founded on a simple idea: to make the world a brighter, happier place through the power of fragrance. As we've grown, so has our purpose and today, we help the world live more fully through the power of fragrance. We’re a team that cares about our customers and believes in giving them a reason to celebrate with fragrance every day. We are committed to creating a welcoming culture that is focused on delivering exceptional fragrances and experiences. We work hard to improve our communities and our planet in a way that will make us proud for years to come ... because we believe the world is a better place when everyone has access to the things that make them happy. Home of America’s Favorite Fragrances®, Bath & Body Works is a global leader in personal care and home fragrance, including the top-selling collections for fine fragrance mist, body lotion and body cream, 3-wick candles, home fragrance diffusers and liquid hand soap. Powered by agility and innovation, the company’s predominantly U.S.-based supply chain enables the company to deliver quality, on-trend luxuries at affordable prices. Bath & Body Works serves and delights customers however and wherever they want to shop, from welcoming, in-store experiences at more than 1,800 company-operated Bath & Body Works locations in the U.S. and Canada and more than 425 international franchised locations to an online storefront at www.BathandBodyWorks.com.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 32,557
Subsidiaries: 1
12-month incidents
0
Known data breaches
1
Attack type number
1
View Profile

Chico's FAS, Inc.

11215 Metro Parkway, Fort Myers, FL, US, 33966
Last Update: 2025-12-09
Between 700 and 749
https://www.chicos.com/store/category/new+arrivals/cat40036/

Our passion for fashion and desire to inspire confidence and joy have been guiding the creation of our women’s clothing, intimates, and accessories for more than 40 years. Our portfolio consists of three brands: Chico’s, WHBM, and Soma found in over 1,000 stores throughout the United States and online. Our commitment and dedication come from our loyal customers and devoted Associates, who are equally inspired by our values. If you share our passion for fashion, we invite you to join us. Visit: https://jobs.chicos.com/

NAICS: 43
NAICS Definition: Retail Trade
Employees: 10,302
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/bath-and-body-works.jpeg
Bath & Body Works
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/chico-s-fas-inc.jpeg
Chico's FAS, Inc.
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Bath & Body Works
100%
Compliance Rate
0/4 Standards Verified
Chico's FAS, Inc.
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Bath & Body Works in 2025.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Chico's FAS, Inc. in 2025.

Incident History — Bath & Body Works (X = Date, Y = Severity)

Bath & Body Works cyber incidents detection timeline including parent company and subsidiaries

Incident History — Chico's FAS, Inc. (X = Date, Y = Severity)

Chico's FAS, Inc. cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/bath-and-body-works.jpeg
Bath & Body Works
Incidents

Date Detected: 6/2021
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/chico-s-fas-inc.jpeg
Chico's FAS, Inc.
Incidents

Date Detected: 5/2023
Type:Breach
Attack Vector: Third-party contractor
Blog: Blog

FAQ

Bath & Body Works company demonstrates a stronger AI Cybersecurity Score compared to Chico's FAS, Inc. company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Bath & Body Works and Chico's FAS, Inc. have experienced a similar number of publicly disclosed cyber incidents.

In the current year, Chico's FAS, Inc. company and Bath & Body Works company have not reported any cyber incidents.

Neither Chico's FAS, Inc. company nor Bath & Body Works company has reported experiencing a ransomware attack publicly.

Both Chico's FAS, Inc. company and Bath & Body Works company have disclosed experiencing at least one data breach.

Neither Chico's FAS, Inc. company nor Bath & Body Works company has reported experiencing targeted cyberattacks publicly.

Neither Bath & Body Works company nor Chico's FAS, Inc. company has reported experiencing or disclosing vulnerabilities publicly.

Neither Bath & Body Works nor Chico's FAS, Inc. holds any compliance certifications.

Neither company holds any compliance certifications.

Bath & Body Works company has more subsidiaries worldwide compared to Chico's FAS, Inc. company.

Bath & Body Works company employs more people globally than Chico's FAS, Inc. company, reflecting its scale as a Retail.

Neither Bath & Body Works nor Chico's FAS, Inc. holds SOC 2 Type 1 certification.

Neither Bath & Body Works nor Chico's FAS, Inc. holds SOC 2 Type 2 certification.

Neither Bath & Body Works nor Chico's FAS, Inc. holds ISO 27001 certification.

Neither Bath & Body Works nor Chico's FAS, Inc. holds PCI DSS certification.

Neither Bath & Body Works nor Chico's FAS, Inc. holds HIPAA certification.

Neither Bath & Body Works nor Chico's FAS, Inc. holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References