Comparison Overview

EssilorLuxottica

VS

The Hershey Company

EssilorLuxottica

1-6, Rue Paul Cézanne, None, Paris, None, FR, None
Last Update: 2025-12-09

We are EssilorLuxottica, a global leader in the design, manufacture and distribution of ophthalmic lenses, frames and sunglasses. Formed in 2018 by the combination of Essilor and Luxottica, our Company combines two centuries of innovation and human endeavour to elevate vision care and the consumer experience around it. We are home to the most loved and widely-recognized vision care and eyewear brands in the world. Our proprietary eyewear brands include Ray-Ban, Oakley, Costa, Vogue Eyewear, Persol and Oliver Peoples, complemented by over 20 prestigious licensed brands. Our advanced lens technologies include Varilux, Crizal, Eyezen, Stellest and Transitions. We offer superior shopping and patient experiences with a network of 18,000 stores including world-class retail brands like Sunglass Hut, LensCrafters, Salmoiraghi & Viganò and GrandVision. Every day, EssilorLuxottica’s more than 190,000 employees in 150 countries work towards a common mission to help people see more and be more. In 2021, the Company’s milestones included a collaboration with Meta to launch Ray-Ban Stories smart glasses; the acquisition of GrandVision bringing 39,000 new employees into our family; expansion of our International Employee Shareholding community, and the launch of Eyes on the Planet, our strategic approach to sustainability.

NAICS: 30
NAICS Definition: Manufacturing
Employees: 79,782
Subsidiaries: 34
12-month incidents
0
Known data breaches
3
Attack type number
3

The Hershey Company

19 E Chocolate Ave, Hershey, Pennsylvania, US, 17033
Last Update: 2025-12-09

The Hershey Company is headquartered in Hershey, Pa., and is an industry-leading snacks company with a purpose to make more moments of goodness through its iconic brands. Hershey has approximately 20,000 employees around the world who work every day to deliver delicious, quality products. The company has more than 70 brands around the world that drive more than $11 billion in annual revenues, including such beloved brands like HERSHEY'S, REESE'S, KIT KAT®, JOLLY RANCHER, ICE BREAKERS, SHAQ-A-LICIOUS, SKINNYPOP and DOT'S HOMESTYLE PRETZEL'S. For more than 130 years, Hershey has been committed to operating responsibly and supporting its people and communities. Hershey founder, Milton Hershey, created Milton Hershey School in 1909, and since then, the company has focused on helping children succeed through access to education.

NAICS: 30
NAICS Definition: Manufacturing
Employees: 10,932
Subsidiaries: 2
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/essilorluxottica.jpeg
EssilorLuxottica
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/the-hershey-company.jpeg
The Hershey Company
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
EssilorLuxottica
100%
Compliance Rate
0/4 Standards Verified
The Hershey Company
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Manufacturing Industry Average (This Year)

No incidents recorded for EssilorLuxottica in 2025.

Incidents vs Manufacturing Industry Average (This Year)

No incidents recorded for The Hershey Company in 2025.

Incident History — EssilorLuxottica (X = Date, Y = Severity)

EssilorLuxottica cyber incidents detection timeline including parent company and subsidiaries

Incident History — The Hershey Company (X = Date, Y = Severity)

The Hershey Company cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/essilorluxottica.jpeg
EssilorLuxottica
Incidents

Date Detected: 05/2023
Type:Breach
Blog: Blog

Date Detected: 10/2020
Type:Ransomware
Attack Vector: Unknown
Motivation: Financial
Blog: Blog

Date Detected: 8/2020
Type:Cyber Attack
Blog: Blog
https://images.rankiteo.com/companyimages/the-hershey-company.jpeg
The Hershey Company
Incidents

Date Detected: 9/2023
Type:Breach
Attack Vector: Unauthorized Access to Email Accounts
Blog: Blog

FAQ

EssilorLuxottica company demonstrates a stronger AI Cybersecurity Score compared to The Hershey Company company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

EssilorLuxottica company has faced a higher number of disclosed cyber incidents historically compared to The Hershey Company company.

In the current year, The Hershey Company company and EssilorLuxottica company have not reported any cyber incidents.

EssilorLuxottica company has confirmed experiencing a ransomware attack, while The Hershey Company company has not reported such incidents publicly.

Both The Hershey Company company and EssilorLuxottica company have disclosed experiencing at least one data breach.

EssilorLuxottica company has reported targeted cyberattacks, while The Hershey Company company has not reported such incidents publicly.

Neither EssilorLuxottica company nor The Hershey Company company has reported experiencing or disclosing vulnerabilities publicly.

Neither EssilorLuxottica nor The Hershey Company holds any compliance certifications.

Neither company holds any compliance certifications.

EssilorLuxottica company has more subsidiaries worldwide compared to The Hershey Company company.

EssilorLuxottica company employs more people globally than The Hershey Company company, reflecting its scale as a Manufacturing.

Neither EssilorLuxottica nor The Hershey Company holds SOC 2 Type 1 certification.

Neither EssilorLuxottica nor The Hershey Company holds SOC 2 Type 2 certification.

Neither EssilorLuxottica nor The Hershey Company holds ISO 27001 certification.

Neither EssilorLuxottica nor The Hershey Company holds PCI DSS certification.

Neither EssilorLuxottica nor The Hershey Company holds HIPAA certification.

Neither EssilorLuxottica nor The Hershey Company holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X