Comparison Overview

epay, a Euronet Company

VS

USAA

epay, a Euronet Company

3500 College Boulevard, Leawood, Kansas, US, 66211
Last Update: 2025-11-23
Between 700 and 749

epay, a segment of Euronet, Inc. (NASDAQ:EEFT), is a leading global provider of payment processing and prepaid solutions that processed more than 3.8 billion transactions in 2023. The company has built an extensive network of retailer touchpoints with more than 800,000 point-of-sale terminals in more than 64 countries that connects brands with consumers all over the world. The company offers a diverse ecosystem of services, products and solutions supporting the distribution of Payment and Branded Payments for more than 1,000 brand partners via Commerce, eCommerce and mCommerce solutions.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 981
Subsidiaries: 12
12-month incidents
0
Known data breaches
1
Attack type number
1

USAA

9800 Fredericksburg Rd., None, San Antonio, Texas, US, 78288
Last Update: 2025-11-27
Between 700 and 749

Since the beginning, our mission has been to provide a range of financial services to the military community and their families. Along the way, we’ve also established ourselves as a destination employer for passionate people looking to serve those who are willing to give it their all. Our mission is to stand with our members and be there for them and their families by facilitating their financial security. It starts with offering a range of highly competitive products, exceptional service, and trusted advice. But to be the military community’s provider of choice also takes dedicated team members who share our core values of service, loyalty, honesty, and integrity.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 39,828
Subsidiaries: 0
12-month incidents
0
Known data breaches
2
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/epay-a-euronet-worldwide-company.jpeg
epay, a Euronet Company
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/usaa.jpeg
USAA
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
epay, a Euronet Company
100%
Compliance Rate
0/4 Standards Verified
USAA
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for epay, a Euronet Company in 2025.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for USAA in 2025.

Incident History — epay, a Euronet Company (X = Date, Y = Severity)

epay, a Euronet Company cyber incidents detection timeline including parent company and subsidiaries

Incident History — USAA (X = Date, Y = Severity)

USAA cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/epay-a-euronet-worldwide-company.jpeg
epay, a Euronet Company
Incidents

Date Detected: 2/2021
Type:Breach
Attack Vector: Database Marketplace Forum
Motivation: Financial Gain
Blog: Blog
https://images.rankiteo.com/companyimages/usaa.jpeg
USAA
Incidents

Date Detected: 4/2024
Type:Breach
Attack Vector: Internal System Error
Blog: Blog

Date Detected: 12/2022
Type:Breach
Attack Vector: Improperly Shared Access Credentials
Blog: Blog

FAQ

epay, a Euronet Company company demonstrates a stronger AI Cybersecurity Score compared to USAA company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

USAA company has faced a higher number of disclosed cyber incidents historically compared to epay, a Euronet Company company.

In the current year, USAA company and epay, a Euronet Company company have not reported any cyber incidents.

Neither USAA company nor epay, a Euronet Company company has reported experiencing a ransomware attack publicly.

Both USAA company and epay, a Euronet Company company have disclosed experiencing at least one data breach.

Neither USAA company nor epay, a Euronet Company company has reported experiencing targeted cyberattacks publicly.

Neither epay, a Euronet Company company nor USAA company has reported experiencing or disclosing vulnerabilities publicly.

Neither epay, a Euronet Company nor USAA holds any compliance certifications.

Neither company holds any compliance certifications.

epay, a Euronet Company company has more subsidiaries worldwide compared to USAA company.

USAA company employs more people globally than epay, a Euronet Company company, reflecting its scale as a Financial Services.

Neither epay, a Euronet Company nor USAA holds SOC 2 Type 1 certification.

Neither epay, a Euronet Company nor USAA holds SOC 2 Type 2 certification.

Neither epay, a Euronet Company nor USAA holds ISO 27001 certification.

Neither epay, a Euronet Company nor USAA holds PCI DSS certification.

Neither epay, a Euronet Company nor USAA holds HIPAA certification.

Neither epay, a Euronet Company nor USAA holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description

Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

Risk Information
cvss4
Base: 8.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

Improper Privilege Management vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from v2.9.0 through v2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Description

File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.

Risk Information
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L