Comparison Overview

Hainan Airlines

VS

American Airlines

Hainan Airlines

Comprehensive Office Building No.21,Hainan Airlines Haikou Meilan Base, No.9, Meilan Airport Road, haikou, hainan, CN
Last Update: 2025-12-10
Between 750 and 799

Hainan Airlines holding company was established in 1993 from their main base in Haikou, and continued on to develop seven shipping bases in China with routes covering Asia and radiating into Europe, North America, Oceania and Africa. In all, Hainan Airlines has opened up almost 500 domestic and international flight routes, reaching almost 100 destinations. For over 20 years Hainan Airlines has embraced the concept of “Oriental hospitality” and advocates a “respect for the customer” service spirit. As a world-class aviation enterprise the “cherished experience” brand philosophy isn’t just our business, it’s our calling. Each year, Hainan Airlines provides thousands of passengers with safe, attentive service. We promote tourism, give peace of mind to loved-ones, meet the unique needs of our business travelers, and focus on making your safety and comfort, our priority. Today Hainan Airlines has over 10,000 employees all over the world, each with their own language, experience, and story. HNA cherishes each and every employee's knowledge and wholeheartedly respects each employee’s contribution. Our next milestone at Hainan Airlines is global diversification and the aggressive development of an international perspective. We can offer challenges, passion and possibilities and in return, we need your vision, experience and creativity.

NAICS: 481
NAICS Definition: Air Transportation
Employees: 3,465
Subsidiaries: 20
12-month incidents
0
Known data breaches
0
Attack type number
0

American Airlines

Dallas-Fort Worth, Texas, US
Last Update: 2025-12-11
Between 600 and 649

Embark on an adventure with a commitment to service, excellence and humanity. Our team is what powers our airline. We are proudly dedicated to our purpose of caring for people on life’s journey, including connecting our customers to the people and places they love or providing our team members development and leadership opportunities to acquire new skills and explore their potential. With more than 1,300 aircraft in our mainline and regional fleets combined and an extensive route network that touches six continents, we’ve got a place for you to start — or continue — your career. Whether you’re stationed at one of our hundreds of airports, working out of our state-of-the-art headquarters in Fort Worth, Texas, or serving customers over the phone from your home office, there are endless opportunities for you to grow and lead at American.

NAICS: 481
NAICS Definition: Air Transportation
Employees: 57,213
Subsidiaries: 1
12-month incidents
1
Known data breaches
5
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/china-hainan-airlines.jpeg
Hainan Airlines
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/american-airlines.jpeg
American Airlines
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Hainan Airlines
100%
Compliance Rate
0/4 Standards Verified
American Airlines
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Airlines and Aviation Industry Average (This Year)

No incidents recorded for Hainan Airlines in 2025.

Incidents vs Airlines and Aviation Industry Average (This Year)

American Airlines has 61.29% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Hainan Airlines (X = Date, Y = Severity)

Hainan Airlines cyber incidents detection timeline including parent company and subsidiaries

Incident History — American Airlines (X = Date, Y = Severity)

American Airlines cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/china-hainan-airlines.jpeg
Hainan Airlines
Incidents

No Incident

https://images.rankiteo.com/companyimages/american-airlines.jpeg
American Airlines
Incidents

Date Detected: 3/2025
Type:Breach
Blog: Blog

Date Detected: 4/2023
Type:Breach
Blog: Blog

Date Detected: 7/2022
Type:Breach
Attack Vector: External System Hacking
Blog: Blog

FAQ

Hainan Airlines company demonstrates a stronger AI Cybersecurity Score compared to American Airlines company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

American Airlines company has historically faced a number of disclosed cyber incidents, whereas Hainan Airlines company has not reported any.

In the current year, American Airlines company has reported more cyber incidents than Hainan Airlines company.

Neither American Airlines company nor Hainan Airlines company has reported experiencing a ransomware attack publicly.

American Airlines company has disclosed at least one data breach, while Hainan Airlines company has not reported such incidents publicly.

Neither American Airlines company nor Hainan Airlines company has reported experiencing targeted cyberattacks publicly.

Neither Hainan Airlines company nor American Airlines company has reported experiencing or disclosing vulnerabilities publicly.

Neither Hainan Airlines nor American Airlines holds any compliance certifications.

Neither company holds any compliance certifications.

Hainan Airlines company has more subsidiaries worldwide compared to American Airlines company.

American Airlines company employs more people globally than Hainan Airlines company, reflecting its scale as a Airlines and Aviation.

Neither Hainan Airlines nor American Airlines holds SOC 2 Type 1 certification.

Neither Hainan Airlines nor American Airlines holds SOC 2 Type 2 certification.

Neither Hainan Airlines nor American Airlines holds ISO 27001 certification.

Neither Hainan Airlines nor American Airlines holds PCI DSS certification.

Neither Hainan Airlines nor American Airlines holds HIPAA certification.

Neither Hainan Airlines nor American Airlines holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N