Comparison Overview

BESTSELLER

VS

SQ Group

BESTSELLER

Fredskovvej, Brande, undefined, DK-7330, DK
Last Update: 2025-12-25
Between 750 and 799

At BESTSELLER, we are more than 22,000 people in 38 different countries working for over 20 fashion brands such as ONLY, JACK & JONES, VERO MODA, NAME IT, SELECTED, VILA, PIECES, OBJECT, MAMALICIOUS, NOISY MAY and Y.A.S. We are a family-owned company with a strong foundation and values to build on, empowering us to pursue the ideas we believe in to take BESTSELLER forward. We are committed to diversity and provide equal opportunities for everyone, irrespective of sex, race, ethnicity, religion or belief, disability, age, sexual orientation or gender identity. We strive to create an empowering environment where people can thrive and develop. Our long-term business success is inextricably linked with respecting people and planetary boundaries. Our commitment to responsible operations extends beyond our own company and throughout our value chain. Our sustainability strategy, Fashion FWD, guides our actions towards our sustainability goals and sets the direction for the future of our company. Fairness, opportunities and a sense of responsibility is part of our vision in BESTSELLER. We treat each other as family, which means that we take each other’s differences into account, while creating an empowering environment where people can thrive and develop. We always put our family first and this is what unites us and makes us stronger together.

NAICS: None
NAICS Definition: Others
Employees: 14,881
Subsidiaries: 12
12-month incidents
0
Known data breaches
0
Attack type number
0

SQ Group

Concord IK Tower, Level 4, North Avenue, Gulshan 2 Dhaka, Dhaka 1212, BD
Last Update: 2025-12-25
Between 750 and 799

Q Collection, based in Singapore, is the parent company of the manufacturing entities collectively known as SQ Group in Bangladesh. As a leading global apparel manufacturing conglomerate, SQ is driven by a passion for innovation, sustainability, and excellence. With a rich heritage spanning 30 years, we operate through three dynamic business clusters: SQ Celsius (Knitwear), SQ Birichina (Lingerie & Activewear), and SQ Hues (Vertical Integration). Our commitment to sustainability is reflected in our LEED-certified facilities and ESG-focused operations. Our team of over 18,000 dedicated employees deliver high-quality products and services, guided by Q Collection's strategic vision of excellence and commitment to shaping the future of apparel manufacturing.

NAICS: None
NAICS Definition:
Employees: 10,001
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/bestseller.jpeg
BESTSELLER
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/sq-group.jpeg
SQ Group
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
BESTSELLER
100%
Compliance Rate
0/4 Standards Verified
SQ Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Apparel & Fashion Industry Average (This Year)

No incidents recorded for BESTSELLER in 2025.

Incidents vs Apparel & Fashion Industry Average (This Year)

No incidents recorded for SQ Group in 2025.

Incident History — BESTSELLER (X = Date, Y = Severity)

BESTSELLER cyber incidents detection timeline including parent company and subsidiaries

Incident History — SQ Group (X = Date, Y = Severity)

SQ Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/bestseller.jpeg
BESTSELLER
Incidents

No Incident

https://images.rankiteo.com/companyimages/sq-group.jpeg
SQ Group
Incidents

No Incident

FAQ

BESTSELLER company demonstrates a stronger AI Cybersecurity Score compared to SQ Group company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, SQ Group company has disclosed a higher number of cyber incidents compared to BESTSELLER company.

In the current year, SQ Group company and BESTSELLER company have not reported any cyber incidents.

Neither SQ Group company nor BESTSELLER company has reported experiencing a ransomware attack publicly.

Neither SQ Group company nor BESTSELLER company has reported experiencing a data breach publicly.

Neither SQ Group company nor BESTSELLER company has reported experiencing targeted cyberattacks publicly.

Neither BESTSELLER company nor SQ Group company has reported experiencing or disclosing vulnerabilities publicly.

Neither BESTSELLER nor SQ Group holds any compliance certifications.

Neither company holds any compliance certifications.

BESTSELLER company has more subsidiaries worldwide compared to SQ Group company.

BESTSELLER company employs more people globally than SQ Group company, reflecting its scale as a Apparel & Fashion.

Neither BESTSELLER nor SQ Group holds SOC 2 Type 1 certification.

Neither BESTSELLER nor SQ Group holds SOC 2 Type 2 certification.

Neither BESTSELLER nor SQ Group holds ISO 27001 certification.

Neither BESTSELLER nor SQ Group holds PCI DSS certification.

Neither BESTSELLER nor SQ Group holds HIPAA certification.

Neither BESTSELLER nor SQ Group holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

n8n is an open source workflow automation platform. Prior to version 2.0.0, in self-hosted n8n instances where the Code node runs in legacy (non-task-runner) JavaScript execution mode, authenticated users with workflow editing access can invoke internal helper functions from within the Code node. This allows a workflow editor to perform actions on the n8n host with the same privileges as the n8n process, including: reading files from the host filesystem (subject to any file-access restrictions configured on the instance and OS/container permissions), and writing files to the host filesystem (subject to the same restrictions). This issue has been patched in version 2.0.0. Workarounds for this issue involve limiting file operations by setting N8N_RESTRICT_FILE_ACCESS_TO to a dedicated directory (e.g., ~/.n8n-files) and ensure it contains no sensitive data, keeping N8N_BLOCK_FILE_ACCESS_TO_N8N_FILES=true (default) to block access to .n8n and user-defined config files, and disabling high-risk nodes (including the Code node) using NODES_EXCLUDE if workflow editors are not fully trusted.

Risk Information
cvss3
Base: 7.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Description

n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process. This issue has been patched in version 2.0.0. Workarounds for this issue involve disabling the Code Node by setting the environment variable NODES_EXCLUDE: "[\"n8n-nodes-base.code\"]", disabling Python support in the Code node by setting the environment variable N8N_PYTHON_ENABLED=false, which was introduced in n8n version 1.104.0, and configuring n8n to use the task runner based Python sandbox via the N8N_RUNNERS_ENABLED and N8N_NATIVE_PYTHON_RUNNER environment variables.

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Description

LMDeploy is a toolkit for compressing, deploying, and serving LLMs. Prior to version 0.11.1, an insecure deserialization vulnerability exists in lmdeploy where torch.load() is called without the weights_only=True parameter when loading model checkpoint files. This allows an attacker to execute arbitrary code on the victim's machine when they load a malicious .bin or .pt model file. This issue has been patched in version 0.11.1.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description

n8n is an open source workflow automation platform. Prior to version 1.114.0, a stored Cross-Site Scripting (XSS) vulnerability may occur in n8n when using the “Respond to Webhook” node. When this node responds with HTML content containing executable scripts, the payload may execute directly in the top-level window, rather than within the expected sandbox introduced in version 1.103.0. This behavior can enable a malicious actor with workflow creation permissions to execute arbitrary JavaScript in the context of the n8n editor interface. This issue has been patched in version 1.114.0. Workarounds for this issue involve restricting workflow creation and modification privileges to trusted users only, avoiding use of untrusted HTML responses in the “Respond to Webhook” node, and using an external reverse proxy or HTML sanitizer to filter responses that include executable scripts.

Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Description

Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N