Comparison Overview

Blue Cross and Blue Shield of Kansas City

VS

Brown & Brown

Blue Cross and Blue Shield of Kansas City

2301 Main Street, Kansas City, MO, 64108, US
Last Update: 2025-05-06 (UTC)
Between 900 and 1000
http://www.bluekc.com

Excellent

Blue Cross and Blue Shield of Kansas City (Blue KC) is an independent licensee of the Blue Cross Blue Shield Association and a not-for-profit health insurance provider serving more than one million members in 32 counties in greater Kansas City and northwest Missouri and Johnson and Wyandotte counties in Kansas. Blue KC's mission is to provide affordable access to healthcare and to improve the health of our members. Blue KC was named one of the “Best Companies to Work For” in 2012 and 2019 in the large company category by Ingram’s Magazine.

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 1,308
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Brown & Brown

300 N Beach St, None, Daytona Beach, Florida, US, 32114
Last Update: 2025-09-05 (UTC)

Excellent

Between 900 and 1000
http://www.bbrown.com

Brown & Brown delivers risk management solutions to help protect and preserve what our customers value most. Our two business segments, Retail and Specialty Distribution, offer businesses and individuals a wide range of insurance solutions. We are one of the insurance industry’s most powerful and influential leaders, with a strong, deeply rooted cultural foundation built on integrity, innovation, superior capabilities and discipline. The Power of WE ignites our performance, and while diverse and varied in abilities and experience, we are all connected through our core values, a commitment to our local communities and a shared mission—always doing what is best for our customers. Brown & Brown is proud to be certified as a Great Place to Work®, and we are always actively looking for talented teammates who embrace our culture to join our winning team. Find us on the NYSE as BRO.

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 10,637
Subsidiaries: 19
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/blue-cross-and-blue-shield-of-kansas-city.jpeg
Blue Cross and Blue Shield of Kansas City
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/brown-brown.jpeg
Brown & Brown
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Blue Cross and Blue Shield of Kansas City
100%
Compliance Rate
0/4 Standards Verified
Brown & Brown
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Blue Cross and Blue Shield of Kansas City in 2025.

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Brown & Brown in 2025.

Incident History — Blue Cross and Blue Shield of Kansas City (X = Date, Y = Severity)

Blue Cross and Blue Shield of Kansas City cyber incidents detection timeline including parent company and subsidiaries

Incident History — Brown & Brown (X = Date, Y = Severity)

Brown & Brown cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/blue-cross-and-blue-shield-of-kansas-city.jpeg
Blue Cross and Blue Shield of Kansas City
Incidents

No Incident

https://images.rankiteo.com/companyimages/brown-brown.jpeg
Brown & Brown
Incidents

No Incident

FAQ

Both Blue Cross and Blue Shield of Kansas City company and Brown & Brown company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, Brown & Brown company has disclosed a higher number of cyber incidents compared to Blue Cross and Blue Shield of Kansas City company.

In the current year, Brown & Brown company and Blue Cross and Blue Shield of Kansas City company have not reported any cyber incidents.

Neither Brown & Brown company nor Blue Cross and Blue Shield of Kansas City company has reported experiencing a ransomware attack publicly.

Neither Brown & Brown company nor Blue Cross and Blue Shield of Kansas City company has reported experiencing a data breach publicly.

Neither Brown & Brown company nor Blue Cross and Blue Shield of Kansas City company has reported experiencing targeted cyberattacks publicly.

Neither Blue Cross and Blue Shield of Kansas City company nor Brown & Brown company has reported experiencing or disclosing vulnerabilities publicly.

Brown & Brown company has more subsidiaries worldwide compared to Blue Cross and Blue Shield of Kansas City company.

Brown & Brown company employs more people globally than Blue Cross and Blue Shield of Kansas City company, reflecting its scale as a Insurance.

Latest Global CVEs (Not Company-Specific)

Description

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.

Published
Date
2025-09-25
Updated
Date
2025-09-25
References
Description

A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the component Filter Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References