Company Details
belk
12,732
121,054
43
belkcareers.com
1
BEL_1829420
Completed


Belk Company CyberSecurity Posture
belkcareers.comCharlotte-based Belk, Inc., a privately-owned department store, began when William Henry Belk opened his first store in 1888 with his brother, Dr. John Belk, joining as a partner. What started as two brothers in business has now grown into a legacy of selling great products at great prices, treating customers like family, and giving back to the community. Throughout the years, we’ve changed and grown in so many ways. We’ve added exciting products, adapted the way we work, and made it easier to shop with new technology and services. Today, Belk serves customers at nearly 300 Belk stores in 16 Southeastern states, at belk.com, and through the mobile app.
Company Details
belk
12,732
121,054
43
belkcareers.com
1
BEL_1829420
Completed
Between 750 and 799

Belk Global Score (TPRM)XXXX



No incidents recorded for Belk in 2026.
No incidents recorded for Belk in 2026.
No incidents recorded for Belk in 2026.
Belk cyber incidents detection timeline including parent company and subsidiaries

Charlotte-based Belk, Inc., a privately-owned department store, began when William Henry Belk opened his first store in 1888 with his brother, Dr. John Belk, joining as a partner. What started as two brothers in business has now grown into a legacy of selling great products at great prices, treating customers like family, and giving back to the community. Throughout the years, we’ve changed and grown in so many ways. We’ve added exciting products, adapted the way we work, and made it easier to shop with new technology and services. Today, Belk serves customers at nearly 300 Belk stores in 16 Southeastern states, at belk.com, and through the mobile app.


Marisa S.A. is the largest Brazilian department store chain specialized in women’s clothing based on the number of stores in Brazil. The Company’s business strategy and operations focus primarily on middle-lower income women between the ages of 20 and 35. The Company’s target customers are members o

Shoppers Stop is one of the pioneers of modern retailing in India. Launched in 1991, Shoppers Stop was the first department store in the country that revolutionized the way modern India shopped. Today, with 81 stores across 37 cities and a growing online presence at www.shoppersstop.com, Shoppers St

O’Reilly Auto Parts started as a single store and has grown into a leading retailer in the automotive aftermarket industry with more than 6,100 locations and counting. With more than 94,000 team members, O’Reilly has expanded into 48 states, Puerto Rico, Mexico, and Canada. O’Reilly, headquartered

At Endeavour Group we exist to bring people together in better, more enjoyable, and more meaningful ways. Because we believe that social communities are thriving communities, built through great experiences and positive, memorable moments. United behind a common purpose of ‘Creating a more sociabl

The Kroger Co., together with its subsidiaries, operates as a food retailer in the United States. The company operates three formats of supermarkets: combination food and drug stores (combo stores), multi department stores, and price impact warehouse stores or marketplace stores. The combo stores op

Somos la cadena de tiendas de conveniencia más grande de México y América Latina, con 45 años de experiencia y más de 22 mil establecimientos ubicados a lo largo de la República Mexicana, Colombia, Perú, Chile y Brasil. En OXXO como compañía 100% mexicana y como parte de la División Proxi

For over five decades, Landmark Group has shaped the region’s retail and hospitality landscape-growing from a single store in Bahrain to one of the largest and most successful omnichannel and hospitality groups across the Middle East, Asia and Africa. Rooted in purpose and powered by innovation, we

Canadian Tire Corporation, Limited (“CTC”) is one of Canada’s most admired and trusted companies. With world-class owned brands and exciting market-leading merchandising strategies, we are continually innovating with purpose: to be there for Canadians from coast-to-coast. We are a group of compani

We’re Team Kmart, on a mission to make everyday living brighter for our customers by improving the Kmart shopping experience – every time and everywhere they engage with us. For over fifty years now, we’ve been spreading the Kmart love to families of all shapes and sizes in Australia, then New Zea
.png)
Today, he is a three-time Charlotte master's alumnus and a technology executive at Honeywell, where he is bridging the gap between...
Over 13000 people were impacted, including 2900 in NC, the company said. Data included Social Security, driver's license info.
A ransomware group has claimed credit for Belk's data breach in May. DragonForce stole 156 GB of data from the Charlotte-based department store chain.
A ransomware group is claiming to be behind Belk's data breach in May. A cybersecurity company told the Charlotte Observer a group named DragonForce posted...
A threat group claimed credit for an attack against Belk. The group claimed to have a trove of company data linked to a May 2025 attack.
Ransomware group DragonForce claims it attacked U.S. retailer Belk in May, stealing over 150GB of data in a disruptive cyberattack.
Belk, the popular US department store chain, has allegedly been targeted by the DragonForce hacker group. This is the same group that struck UK retailer Marks...
DragonForce says it stole more than 150 gigabytes of data from US department store chain Belk in a May cyberattack.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Belk is https://www.belkcareers.com/.
According to Rankiteo, Belk’s AI-generated cybersecurity score is 790, reflecting their Fair security posture.
According to Rankiteo, Belk currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Belk has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
According to Rankiteo, Belk is not certified under SOC 2 Type 1.
According to Rankiteo, Belk does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Belk is not listed as GDPR compliant.
According to Rankiteo, Belk does not currently maintain PCI DSS compliance.
According to Rankiteo, Belk is not compliant with HIPAA regulations.
According to Rankiteo,Belk is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Belk operates primarily in the Retail industry.
Belk employs approximately 12,732 people worldwide.
Belk presently has no subsidiaries across any sectors.
Belk’s official LinkedIn profile has approximately 121,054 followers.
Belk is classified under the NAICS code 43, which corresponds to Retail Trade.
Yes, Belk has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/belk.
Yes, Belk maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/belk.
As of January 24, 2026, Rankiteo reports that Belk has not experienced any cybersecurity incidents.
Belk has an estimated 15,595 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Belk has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting (XSS) exists in the login error view template `login.twig` of versions 2.19.1 and below. The `username` value can be echoed back without proper contextual encoding when authentication fails. An attacker can execute script in the login page context. This issue has been fixed in version 2.19.2.
A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the unsafe innerHTML property to render domain search results.
A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save process. This allows an unauthenticated attacker to upload arbitrary PHP code by spoofing the MIME type as an image, leading to full system compromise.
A UNIX symbolic link following issue in the jailer component in Firecracker version v1.13.1 and earlier and 1.14.0 on Linux may allow a local host user with write access to the pre-created jailer directories to overwrite arbitrary host files via a symlink attack during the initialization copy at jailer startup, if the jailer is executed with root privileges. To mitigate this issue, users should upgrade to version v1.13.2 or 1.14.1 or above.
An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This unauthenticated endpoint returns a list of cashier accounts, including names, email addresses, usernames, and passwords hashed using MD5. As MD5 is a broken cryptographic function, the hashes can be easily reversed using public tools, exposing user credentials in plaintext. This allows remote attackers to perform unauthorized logins and potentially gain access to sensitive POS operations or backend functions.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.