Comparison Overview

Credit Union of Southern California

VS

KPMG US

Credit Union of Southern California

8101 E. Kaiser Ave., Anaheim, 92808, US
Last Update: 2026-04-03
View Profile
Between 700 and 749
http://www.CUSoCal.org

At CU SoCal, we believe we are more than a place to save and borrow money. We're a place where dreams thrive. It starts with our focus on making a difference--not a profit. Our bottom line is to help our Members find a way, not get in their way. Whether they’re looking to buy a home, plan for retirement, or open their first savings account, the team at CU SoCal works to empower every Member to make their plans happen, turning wishing and waiting into achieving and doing.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 272
Subsidiaries: 1
12-month incidents
0
Known data breaches
1
Attack type number
1
View Profile

KPMG US

345 Park Avenue, New York, NY, US, 10154
Last Update: 2026-04-02
Between 800 and 849
http://www.kpmg.com/US

KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. With 90+ offices and more than 36,000 employees and partners throughout the US, we’re leading the industry in new and exciting ways. Our size and strength make us much more agile and responsive to changing trends.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 53,626
Subsidiaries: 73
12-month incidents
0
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/credit-union-of-southern-california.jpeg
Credit Union of Southern California
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/kpmg-us.jpeg
KPMG US
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Credit Union of Southern California
100%
Compliance Rate
0/4 Standards Verified
KPMG US
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Credit Union of Southern California in 2026.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for KPMG US in 2026.

Incident History — Credit Union of Southern California (X = Date, Y = Severity)

Credit Union of Southern California cyber incidents detection timeline including parent company and subsidiaries

Incident History — KPMG US (X = Date, Y = Severity)

KPMG US cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/credit-union-of-southern-california.jpeg
Credit Union of Southern California
Incidents

Date Detected: 1/2023
Type:Breach
Attack Vector: Unauthorized Access to Email Account
Blog: Blog
https://images.rankiteo.com/companyimages/kpmg-us.jpeg
KPMG US
Incidents

Date Detected: 1/2026
Type:Ransomware
Motivation: financial gain
Blog: Blog

Date Detected: 6/2023
Type:Ransomware
Motivation: Financial gain (ransom)
Blog: Blog

FAQ

KPMG US company demonstrates a stronger AI Cybersecurity Score compared to Credit Union of Southern California company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

KPMG US company has faced a higher number of disclosed cyber incidents historically compared to Credit Union of Southern California company.

In the current year, KPMG US company has reported more cyber incidents than Credit Union of Southern California company.

KPMG US company has confirmed experiencing a ransomware attack, while Credit Union of Southern California company has not reported such incidents publicly.

Credit Union of Southern California company has disclosed at least one data breach, while the other KPMG US company has not reported such incidents publicly.

Neither KPMG US company nor Credit Union of Southern California company has reported experiencing targeted cyberattacks publicly.

Neither Credit Union of Southern California company nor KPMG US company has reported experiencing or disclosing vulnerabilities publicly.

Neither Credit Union of Southern California nor KPMG US holds any compliance certifications.

Neither company holds any compliance certifications.

KPMG US company has more subsidiaries worldwide compared to Credit Union of Southern California company.

KPMG US company employs more people globally than Credit Union of Southern California company, reflecting its scale as a Financial Services.

Neither Credit Union of Southern California nor KPMG US holds SOC 2 Type 1 certification.

Neither Credit Union of Southern California nor KPMG US holds SOC 2 Type 2 certification.

Neither Credit Union of Southern California nor KPMG US holds ISO 27001 certification.

Neither Credit Union of Southern California nor KPMG US holds PCI DSS certification.

Neither Credit Union of Southern California nor KPMG US holds HIPAA certification.

Neither Credit Union of Southern California nor KPMG US holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.

Published
Date
2026-04-02
Updated
Date
2026-04-02
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

Published
Date
2026-04-02
Updated
Date
2026-04-02
References
Description

XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services

Published
Date
2026-04-02
Updated
Date
2026-04-02
References
Description

Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda and red_url parameters.

Published
Date
2026-04-02
Updated
Date
2026-04-02
References
Description

A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda parameter.

Published
Date
2026-04-02
Updated
Date
2026-04-02
References