Coca-Cola FEMSA
Company Details
Linkedin ID:
coca-cola-femsa
Website:
Employees number:
60,276
Number of followers:
3,643,679
NAICS:
722
Industry Type:
Homepage:
coca-colafemsa.com
IP Addresses:
0
Company ID:
COC_7634917
Scan Status:
In-progress
Coca-Cola FEMSA Company CyberSecurity Posture
coca-colafemsa.com
The public bottler with the largest volume of sales within the Coca-Cola System, committed with the generation of economic value and social and environmental well-being.
Coca-Cola FEMSA A.I CyberSecurity Scoring
Coca-Cola FEMSA Risk Score (AI oriented)Between 800 and 849
Coca-Cola FEMSA
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
Coca-Cola FEMSA Global Score (TPRM)XXXX
Coca-Cola FEMSA
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
Coca-Cola FEMSA Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
Coca-Cola FEMSA Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for Coca-Cola FEMSA
Incidents vs Food and Beverage Services Industry Average (This Year)
No incidents recorded for Coca-Cola FEMSA in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for Coca-Cola FEMSA in 2025.
Incident Types Coca-Cola FEMSA vs Food and Beverage Services Industry Avg (This Year)
No incidents recorded for Coca-Cola FEMSA in 2025.
Incident History — Coca-Cola FEMSA (X = Date, Y = Severity)
Coca-Cola FEMSA cyber incidents detection timeline including parent company and subsidiaries
Coca-Cola FEMSA Company Subsidiaries
The public bottler with the largest volume of sales within the Coca-Cola System, committed with the generation of economic value and social and environmental well-being.
Loading...
Coca-Cola FEMSA Similar Companies
Molson Coors Beverage Company
From Coors Light, Miller Lite, Molson Canadian, Carling and Staropramen to Coors Banquet, Blue Moon Belgian White, Leinenkugel’s Summer Shandy, Vizzy, Creemore Springs and more, our 16,000+ employees across the globe make and market many of the most beloved beverage brands in the world. While our hi
Arca Continental
Arca Continental produces, distributes and sells non-alcoholic beverages under The Coca-Cola Company brand, as well as snacks under the brands of Bokados in Mexico, Inalecsa in Ecuador and Wise in the US. With an outstanding history spanning more than 98 years, Arca Continental is the second-larges
Almarai - المراعي
Founded in 1977, Almarai Company is the world’s largest vertically integrated dairy company and the largest food and beverage manufacturing and distribution company in MENA. Headquartered in the Kingdom of Saudi Arabia, Almarai Company is ranked as the number one FMCG Brand in the MENA region and th
Carlsberg Group
This is the official LinkedIn channel of the Carlsberg Group. The Carlsberg Group was established in 1847 by brewer J.C. Jacobsen. J.C. Jacobsen was a true renaissance man. A believer in quality, research and serving the community, he shared his knowledge with fellow brewers. He looked to the futur
Red Bull
Red Bull Gives Wiiings to People and Ideas. This has driven us – and all we do – since 1987. Today, Red Bull operates in over 170 countries, selling more than 12 billion cans annually and growing! Above all, our people remain the essential ingredient in bringing the Red Bull brand to life. Check out
Grupo Bimbo
NOURISHING A BETTER WORLD With more than 148,000 associates in 34 countries , we are the biggest bakery in the world! At Grupo Bimbo we are committed to work in a sustainable way for a better world and to generate economic development in 4 continents. We strive to improve the lifestyle of the comm
Every day, millions of people throughout the world consume foods and beverages containing Kerry’s taste and nutrition solutions. We are committed to making the world of food and beverage better for everyone, and dedicated to our Purpose, Inspiring Food, Nourishing Life. At Kerry, we are proud to
PRAN-RFL Group
PRAN RFL Group, one of the most reputed conglomerates in Bangladesh, is in market since 1981. It started mainly with Foundry business and gradually diversified to Light Engineering, PVC Fittings, Plastics, Food and Beverage and Agro-Processing. It has it's marketing and selling network in 145 countr
VARUN BEVERAGES LIMITED
Varun Beverages Limited (VBL) is one of the top FMCG players in the Indian Market. We are on track towards strengthening our position in the global beverage industry with our presence in 14 countries in the Indian sub-continent and Africa - where we are responsible for producing popular brands like
.png)
Coca-Cola FEMSA CyberSecurity News
November 24, 2025 02:47 PM
UBS Cuts Coca-Cola FEMSA (KOF) Target to $109, Maintains Buy Rating
Coca-Cola FEMSA, S.A.B. de C.V. (NYSE:KOF) is one of the best Mexican stocks to invest in. On November 12, UBS cut its price target for...
November 06, 2025 08:00 AM
Resilient Demand in South America and Soft Conditions in Mexico Sum Up Coca-Cola FEMSA (KOF)’s Q3 Results
Representing 1.26% of Bill Gates's stock portfolio, Coca-Cola FEMSA, S.A.B. de C.V. (NYSE:KOF) is one of his top 15 stock picks.
October 24, 2025 07:00 AM
Coca-Cola Femsa SAB de CV (KOF) Q3 2025 Earnings Call Highlights: Revenue Growth Amid Volume ...
Despite a decline in consolidated volume, Coca-Cola Femsa SAB de CV (KOF) reports a 3.3% revenue increase, driven by strategic initiatives...
September 17, 2025 07:00 AM
Mexico's Femsa appoints Jose Antonio Fernandez Garza-Laguera as CEO
Mexican bottler and retailer Femsa on Wednesday appointed Jose Antonio Fernandez Garza-Laguera as the new chief executive officer,...
September 08, 2025 07:00 AM
ANDICOM 2025 Draws 6,000 Attendees to Cartagena for Latin American Business and Technology Conference
ANDICOM 2025, the Andes region's largest and most important enterprise technology conference, took place last week in Cartagena,...
August 08, 2025 07:00 AM
Coca-Cola FEMSA invests in Brazil factory
Coca-Cola's Brazilian arm is investing $600m reais ($110m) expand the Mogi das Cruzes factory in São Paulo, Brazil.
August 07, 2025 07:00 AM
Coca-Cola FEMSA, S.A.B. de C.V.'s (NYSE:KOF) top owners are public companies with 75% stake, while 14% is held by institutions
NYSE:KOF 1 Year Share Price vs Fair Value Explore Coca-Cola FEMSA. de's Fair Values from the Community and select yours...
July 24, 2025 07:00 AM
FEMSA, Coca-Cola FEMSA Remain in FTSE4Good Index Series
FEMSA and Coca-Cola FEMSA were recognized for their strong ESG practices.
April 30, 2025 07:00 AM
Coca-Cola FEMSA, S.A.B. de C.V. (KOF): Among the Best Stocks to Buy According to the Bill & Melinda Gates Foundation Trust
In this article, we are going to take a look at where Coca-Cola FEMSA, SAB de CV (NYSE:KOF) stands against Bill & Melinda Gates Foundation Trust's other stock...
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
Coca-Cola FEMSA CyberSecurity History Information
Official Website of Coca-Cola FEMSA
The official website of Coca-Cola FEMSA is http://www.coca-colafemsa.com.
Coca-Cola FEMSA’s AI-Generated Cybersecurity Score
According to Rankiteo, Coca-Cola FEMSA’s AI-generated cybersecurity score is 802, reflecting their Good security posture.
How many security badges does Coca-Cola FEMSA’ have ?
According to Rankiteo, Coca-Cola FEMSA currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does Coca-Cola FEMSA have SOC 2 Type 1 certification ?
According to Rankiteo, Coca-Cola FEMSA is not certified under SOC 2 Type 1.
Does Coca-Cola FEMSA have SOC 2 Type 2 certification ?
According to Rankiteo, Coca-Cola FEMSA does not hold a SOC 2 Type 2 certification.
Does Coca-Cola FEMSA comply with GDPR ?
According to Rankiteo, Coca-Cola FEMSA is not listed as GDPR compliant.
Does Coca-Cola FEMSA have PCI DSS certification ?
According to Rankiteo, Coca-Cola FEMSA does not currently maintain PCI DSS compliance.
Does Coca-Cola FEMSA comply with HIPAA ?
According to Rankiteo, Coca-Cola FEMSA is not compliant with HIPAA regulations.
Does Coca-Cola FEMSA have ISO 27001 certification ?
According to Rankiteo,Coca-Cola FEMSA is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of Coca-Cola FEMSA
Coca-Cola FEMSA operates primarily in the Food and Beverage Services industry.
Number of Employees at Coca-Cola FEMSA
Coca-Cola FEMSA employs approximately 60,276 people worldwide.
Subsidiaries Owned by Coca-Cola FEMSA
Coca-Cola FEMSA presently has no subsidiaries across any sectors.
Coca-Cola FEMSA’s LinkedIn Followers
Coca-Cola FEMSA’s official LinkedIn profile has approximately 3,643,679 followers.
NAICS Classification of Coca-Cola FEMSA
Coca-Cola FEMSA is classified under the NAICS code 722, which corresponds to Food Services and Drinking Places.
Coca-Cola FEMSA’s Presence on Crunchbase
No, Coca-Cola FEMSA does not have a profile on Crunchbase.
Coca-Cola FEMSA’s Presence on LinkedIn
Yes, Coca-Cola FEMSA maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/coca-cola-femsa.
Cybersecurity Incidents Involving Coca-Cola FEMSA
As of November 27, 2025, Rankiteo reports that Coca-Cola FEMSA has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
Coca-Cola FEMSA has an estimated 8,400 peer or competitor companies worldwide.
Coca-Cola FEMSA CyberSecurity History Information
How many cyber incidents has Coca-Cola FEMSA faced ?
Total Incidents: According to Rankiteo, Coca-Cola FEMSA has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at Coca-Cola FEMSA ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
- https://github.com/angular/angular/commit/0276479e7d0e280e0f8d26fa567d3b7aa97a516f
- https://github.com/angular/angular/commit/05fe6686a97fa0bcd3cf157805b3612033f975bc
- https://github.com/angular/angular/commit/3240d856d942727372a705252f7c8c115394a41e
- https://github.com/angular/angular/releases/tag/19.2.16
- https://github.com/angular/angular/releases/tag/20.3.14
- https://github.com/angular/angular/releases/tag/21.0.1
- https://github.com/angular/angular/security/advisories/GHSA-58c5-g7wp-6w37
Description
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=coca-cola-femsa' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
