Comparison Overview

Chiesi USA, Inc.

VS

Merck Group

Chiesi USA, Inc.

175 Regency Woods Place, Ste 600, Cary, North Carolina, US, 27518
Last Update: 2025-12-22
View Profile
Between 650 and 699
http://chiesiusa.com/

Chiesi USA, Inc., headquartered in Cary, N.C., is a specialty pharmaceutical company focused on commercialization of products for the hospital, rare disease and target office-based specialties. Our employees take an entrepreneurial approach to meet the evolving needs of our customers. As a Public Benefit Corporation, Chiesi USA is committed to operating as a good corporate citizen; positively impacting communities in which we live and serve. Headquartered in Cary NC, we employ over 360 employees in the United States. Previously known as Cornerstone Therapeutics, the company was acquired by the Chiesi Group in 2014. Chiesi USA, Inc. is a wholly-owned subsidiary of Chiesi Farmaceutici S.p.A. Headquartered in Parma, Italy, Chiesi Farmaceutici is an international research-focused group with more than 80 years of experience in the pharmaceutical industry. The Group employs more than 5,300 people in 27 affiliates worldwide, selling products in more than 80 countries. Chiesi is recognized as a top 50 company in terms of revenue and R&D. Careers at Chiesi USA Inc: Email: [email protected] Business Development: Email: [email protected] All other inquiries: Email: [email protected]

NAICS: 3254
NAICS Definition: Pharmaceutical and Medicine Manufacturing
Employees: 532
Subsidiaries: 2
12-month incidents
1
Known data breaches
1
Attack type number
1
View Profile

Merck Group

Frankfurter Str. 250, Darmstadt, DE, 64293
Last Update: 2025-12-17
Between 800 and 849
http://www.merckgroup.com

This channel is not intended for U.S. and Canadian visitors. Merck operates in the U.S. and Canada as EMD Serono in Healthcare, MilliporeSigma in Life Science and EMD Electronics in Electronics. An unaffiliated and unrelated company, Merck & Co., Inc., Kenilworth, NJ, US holds the rights in the trademark MERCK in the U.S. and Canada. _______________________________ We are Merck, a leading global science and technology company headquartered in Germany. We are curious explorers, courageous pioneers, and ingenious inventors. Our colleagues across the globe love innovating with science and technology to enrich people’s lives with our solutions in Life Science, Healthcare, and Electronics. Together, we dream big and are passionate about caring for our rich mix of people, customers, patients, and the planet. We believe in the positive power of science and technology. It has determined our actions since 1668 and inspires us to continue researching for a future worth living. As a family-owned company with over 350 years of experience, we stand for sustainability, responsibility, and innovative strength. We take pride in being a diverse and inclusive company that values and fosters the talents and abilities of our employees. That's why we are always looking for curious minds that see themselves imagining the unimaginable with us. Work your Magic and join Merck. Legal Disclaimer: www.merckgroup.com/en/legal-disclaimer.html Data Privacy Declaration: www.merckgroup.com/en/privacy-statement

NAICS: 3254
NAICS Definition: Pharmaceutical and Medicine Manufacturing
Employees: 32,133
Subsidiaries: 3
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/chiesi-usa.jpeg
Chiesi USA, Inc.
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/merck-group.jpeg
Merck Group
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Chiesi USA, Inc.
100%
Compliance Rate
0/4 Standards Verified
Merck Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Pharmaceutical Manufacturing Industry Average (This Year)

Chiesi USA, Inc. has 8.7% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Pharmaceutical Manufacturing Industry Average (This Year)

No incidents recorded for Merck Group in 2025.

Incident History — Chiesi USA, Inc. (X = Date, Y = Severity)

Chiesi USA, Inc. cyber incidents detection timeline including parent company and subsidiaries

Incident History — Merck Group (X = Date, Y = Severity)

Merck Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/chiesi-usa.jpeg
Chiesi USA, Inc.
Incidents

Date Detected: 12/2025
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/merck-group.jpeg
Merck Group
Incidents

No Incident

FAQ

Merck Group company demonstrates a stronger AI Cybersecurity Score compared to Chiesi USA, Inc. company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Chiesi USA, Inc. company has historically faced a number of disclosed cyber incidents, whereas Merck Group company has not reported any.

In the current year, Chiesi USA, Inc. company has reported more cyber incidents than Merck Group company.

Neither Merck Group company nor Chiesi USA, Inc. company has reported experiencing a ransomware attack publicly.

Chiesi USA, Inc. company has disclosed at least one data breach, while the other Merck Group company has not reported such incidents publicly.

Neither Merck Group company nor Chiesi USA, Inc. company has reported experiencing targeted cyberattacks publicly.

Neither Chiesi USA, Inc. company nor Merck Group company has reported experiencing or disclosing vulnerabilities publicly.

Neither Chiesi USA, Inc. nor Merck Group holds any compliance certifications.

Neither company holds any compliance certifications.

Merck Group company has more subsidiaries worldwide compared to Chiesi USA, Inc. company.

Merck Group company employs more people globally than Chiesi USA, Inc. company, reflecting its scale as a Pharmaceutical Manufacturing.

Neither Chiesi USA, Inc. nor Merck Group holds SOC 2 Type 1 certification.

Neither Chiesi USA, Inc. nor Merck Group holds SOC 2 Type 2 certification.

Neither Chiesi USA, Inc. nor Merck Group holds ISO 27001 certification.

Neither Chiesi USA, Inc. nor Merck Group holds PCI DSS certification.

Neither Chiesi USA, Inc. nor Merck Group holds HIPAA certification.

Neither Chiesi USA, Inc. nor Merck Group holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyDevs TempTool allows Stored XSS.This issue affects TempTool: from n/a through 1.3.1.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
References
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tormorten WP Microdata allows Stored XSS.This issue affects WP Microdata: from n/a through 1.0.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
References
Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool allows Retrieve Embedded Sensitive Data.This issue affects TempTool: from n/a through 1.3.1.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
Description

A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References