Comparison Overview

Deutsche Leasing Gruppe

VS

BB&T

Deutsche Leasing Gruppe

Frolingstrasse 15, Bad Homburg vor der Hohe, HE, 61352, DE
Last Update: 2025-11-20

Wir sind Ihr Asset-Finance-Partner Als führendes herstellerunabhängiges Leasing-Unternehmen in Deutschland sind wir mehr als nur ein kompetenter Partner in Sachen Leasing. Mit unserer Kombination unterschiedlichster Kompetenzen – von Investitionslösungen über technisches Know-how bis zum Fachwissen unserer Partner – können wir Ihnen einen umfassenden Service bieten. Lösungsorientiert bedeutet für Sie: schnelle, einfache Finanzierungsprodukte oder individuelle Leistungspakete. Ganz gleich, welche Finanzierungslösung und welche begleitenden Services Sie benötigen, mit uns können Sie rechnen – in Deutschland, in Europa, weltweit. Dabei steht für uns am Anfang immer eine umfassende Beratung. Wir wollen Sie und Ihr Unternehmen kennenlernen. Denn nur, wenn wir Ihr Unternehmen verstehen, können wir Ihnen ein optimales Lösungspaket anbieten. Asset Finance steht für unsere Objektexpertise. Diese spielt für unsere Finanzierungsleistungen eine zentrale Rolle. Denn bei der Vertragsgestaltung werden neben der Bonität Ihres Unternehmens auch der Wert des Investitionsgutes, sein erwarteter Wertverlauf während der Vertragslaufzeit sowie seine Verwertbarkeit berücksichtigt. Die Finanzierungsexperten der Deutschen Leasing kommen deshalb aus Ihrer Branche: Landwirte, Ingenieure, Kfz-Spezialisten oder Informatiker finden sich beispielsweise in unserem Vertrieb. So werden Sie auf Augenhöhe beraten – von Experte zu Experte. Davon profitiert auch Ihr Geldbeutel. Ihr Partner zu sein und mit Ihnen langfristig zusammenzuarbeiten, ist uns ein Anliegen. Deshalb bieten wir Ihnen unsere gesamte Kompetenz als Marktführer in Deutschland, unser internationales Know-how und die Stabilität der Sparkassen-Finanzgruppe. Aber auch Vertrauen und Zuverlässigkeit gehören zu unseren Werten. So können Sie sich beruhigt auf Ihre Kernkompetenzen konzentrieren.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 1,291
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

BB&T

214 North Tryon Street, Charlotte, NC, undefined, US
Last Update: 2025-11-20
Between 750 and 799

We’d love to stay connected with you! Please follow our Truist company page and unfollow this page which is no longer active. BB&T and SunTrust formed Truist with a shared purpose—to inspire and build better lives and communities. With our combined resources, collective passion, and commitment to innovation, we’re creating a better financial experience to help people and businesses achieve more. With 275 years of combined BB&T and SunTrust history, Truist serves approximately 12 million households with leading market share in many high growth markets in the country. The company offers a wide range of services including retail, small business and commercial banking; asset management; capital markets; commercial real estate; corporate and institutional banking; insurance; mortgage; payments; specialized lending; and wealth management. Headquartered in Charlotte, North Carolina, Truist is the sixth-largest commercial bank in the U.S. Truist Bank, Member FDIC. Learn more at Truist.com and see social media terms and conditions at Truist.com/SocialTerms.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 13,573
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/deutsche-leasing-ag.jpeg
Deutsche Leasing Gruppe
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/bb&t.jpeg
BB&T
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Deutsche Leasing Gruppe
100%
Compliance Rate
0/4 Standards Verified
BB&T
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Deutsche Leasing Gruppe in 2025.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for BB&T in 2025.

Incident History — Deutsche Leasing Gruppe (X = Date, Y = Severity)

Deutsche Leasing Gruppe cyber incidents detection timeline including parent company and subsidiaries

Incident History — BB&T (X = Date, Y = Severity)

BB&T cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/deutsche-leasing-ag.jpeg
Deutsche Leasing Gruppe
Incidents

Date Detected: 6/2023
Type:Cyber Attack
Blog: Blog
https://images.rankiteo.com/companyimages/bb&t.jpeg
BB&T
Incidents

No Incident

FAQ

BB&T company demonstrates a stronger AI Cybersecurity Score compared to Deutsche Leasing Gruppe company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Deutsche Leasing Gruppe company has historically faced a number of disclosed cyber incidents, whereas BB&T company has not reported any.

In the current year, BB&T company and Deutsche Leasing Gruppe company have not reported any cyber incidents.

Neither BB&T company nor Deutsche Leasing Gruppe company has reported experiencing a ransomware attack publicly.

Neither BB&T company nor Deutsche Leasing Gruppe company has reported experiencing a data breach publicly.

Deutsche Leasing Gruppe company has reported targeted cyberattacks, while BB&T company has not reported such incidents publicly.

Neither Deutsche Leasing Gruppe company nor BB&T company has reported experiencing or disclosing vulnerabilities publicly.

Neither Deutsche Leasing Gruppe nor BB&T holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Deutsche Leasing Gruppe company nor BB&T company has publicly disclosed detailed information about the number of their subsidiaries.

BB&T company employs more people globally than Deutsche Leasing Gruppe company, reflecting its scale as a Financial Services.

Neither Deutsche Leasing Gruppe nor BB&T holds SOC 2 Type 1 certification.

Neither Deutsche Leasing Gruppe nor BB&T holds SOC 2 Type 2 certification.

Neither Deutsche Leasing Gruppe nor BB&T holds ISO 27001 certification.

Neither Deutsche Leasing Gruppe nor BB&T holds PCI DSS certification.

Neither Deutsche Leasing Gruppe nor BB&T holds HIPAA certification.

Neither Deutsche Leasing Gruppe nor BB&T holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H