Comparison Overview

Bunge

VS

Lactalis Group

Bunge

1391 Timberlake Manor Pkwy, Chesterfield, Missouri, 63017, US
Last Update: 2025-12-09
Between 750 and 799

At Bunge (NYSE: BG), our purpose is to connect farmers to consumers to deliver essential food, feed and fuel to the world. With more than two centuries of experience, unmatched global scale and deeply rooted relationships, we work to strengthen global food security, increase sustainability where we operate, and help communities prosper. As a world leader in oilseed processing and a leading producer and supplier of specialty plant-based oils and fats, we value our partnerships with farmers to bring quality products from where they’re grown to where they’re consumed. At the same time, we collaborate with our customers to develop tailored and innovative solutions to meet evolving dietary needs and trends in every part of the world. Our Company has its registered office in Geneva, Switzerland and its corporate headquarters in St. Louis, Missouri. We have approximately 23,000 dedicated employees working across approximately 300 facilities located in more than 40 countries.

NAICS: 311
NAICS Definition: Food Manufacturing
Employees: 21,359
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Lactalis Group

10-20 Rue Adolphe Beck, LAVAL cedex 9, Mayenne, FR, 53089
Last Update: 2025-12-09
Between 750 and 799

From family-owned company to dairy industry’s global leader Created in 1933 by André Besnier in Laval, Lactalis Group is a family-owned company settled in rural areas, which became dairy industry’s global leader and a major player of employment. True to its first trade, cheesemonger, Lactalis Group, the first AOP cheese producer, contributes to the development of a rural economy open to the word. With a presence in around a hundred countries, Lactalis Group counts 80 000 collaborators and 250 production sites today. A unique dairy expertise Across all dairy product categories (milk consumption, ultra-fresh milk, cheese, butter, cream and dairy ingredients), we develop in the long run a portfolio of a hundred brands, made up of major emblematic brands as well as local or regional brands. In keeping with local food cultures and consumption modes, our ambition is to offer healthy, gourmet and accessible products to the greatest number of people. Learn more about Lactalis on www.lactalis.fr

NAICS: 311
NAICS Definition: Food Manufacturing
Employees: 22,068
Subsidiaries: 4
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/bunge.jpeg
Bunge
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/lactalis.jpeg
Lactalis Group
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Bunge
100%
Compliance Rate
0/4 Standards Verified
Lactalis Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Food and Beverage Manufacturing Industry Average (This Year)

No incidents recorded for Bunge in 2025.

Incidents vs Food and Beverage Manufacturing Industry Average (This Year)

No incidents recorded for Lactalis Group in 2025.

Incident History — Bunge (X = Date, Y = Severity)

Bunge cyber incidents detection timeline including parent company and subsidiaries

Incident History — Lactalis Group (X = Date, Y = Severity)

Lactalis Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/bunge.jpeg
Bunge
Incidents

No Incident

https://images.rankiteo.com/companyimages/lactalis.jpeg
Lactalis Group
Incidents

No Incident

FAQ

Bunge company demonstrates a stronger AI Cybersecurity Score compared to Lactalis Group company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Lactalis Group company has disclosed a higher number of cyber incidents compared to Bunge company.

In the current year, Lactalis Group company and Bunge company have not reported any cyber incidents.

Neither Lactalis Group company nor Bunge company has reported experiencing a ransomware attack publicly.

Neither Lactalis Group company nor Bunge company has reported experiencing a data breach publicly.

Neither Lactalis Group company nor Bunge company has reported experiencing targeted cyberattacks publicly.

Neither Bunge company nor Lactalis Group company has reported experiencing or disclosing vulnerabilities publicly.

Neither Bunge nor Lactalis Group holds any compliance certifications.

Neither company holds any compliance certifications.

Lactalis Group company has more subsidiaries worldwide compared to Bunge company.

Lactalis Group company employs more people globally than Bunge company, reflecting its scale as a Food and Beverage Manufacturing.

Neither Bunge nor Lactalis Group holds SOC 2 Type 1 certification.

Neither Bunge nor Lactalis Group holds SOC 2 Type 2 certification.

Neither Bunge nor Lactalis Group holds ISO 27001 certification.

Neither Bunge nor Lactalis Group holds PCI DSS certification.

Neither Bunge nor Lactalis Group holds HIPAA certification.

Neither Bunge nor Lactalis Group holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N