Comparison Overview

Eversource Energy

VS

Westinghouse Electric Company

Eversource Energy

56 Prospect Street, None, Hartford, Connecticut, US, 06103
Last Update: 2026-04-01
Between 800 and 849

Eversource Energy (NYSE:ES), a Fortune 500 and Standard & Poor’s 500 energy company based in Connecticut, Massachusetts and New Hampshire, operates New England’s largest energy delivery system. Eversource is committed to safety, reliability, environmental leadership and stewardship, and expanding energy options for its 4.4 million electric and natural gas customers. We are a company dedicated to our customers, communities and employees. We know that our success depends on the best efforts of our engaged team- , talented and dedicated individuals who take pride in their work, know and exhibit the value of teamwork and collaboration, and support each other in working safely every day.

NAICS: 22
NAICS Definition: Utilities
Employees: 8,034
Subsidiaries: 2
12-month incidents
0
Known data breaches
0
Attack type number
0

Westinghouse Electric Company

1000 Westinghouse Drive, Cranberry Township, 16066, US
Last Update: 2026-04-02

Westinghouse Electric Company is the world's leading supplier of safe and innovative nuclear technology. We provide our utility customers around the world with the most reliable, dependable nuclear power plants, nuclear fuel, plant automation and operating plant products and services. We are driven by our powerful history and experience, ground-breaking ideas and our focus on safety and sustainability. At Westinghouse, we are focused on nuclear energy technology. Our goal is simple - to provide solutions to our customers to keep their plants safe, reliable and efficient. Helping our customers support the needs of their customers is why we are committed to quality, safety and innovation at every turn.

NAICS: 22
NAICS Definition: Utilities
Employees: 11,860
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/eversourceenergy.jpeg
Eversource Energy
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/westinghouse-electric-company.jpeg
Westinghouse Electric Company
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Eversource Energy
100%
Compliance Rate
0/4 Standards Verified
Westinghouse Electric Company
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Utilities Industry Average (This Year)

No incidents recorded for Eversource Energy in 2026.

Incidents vs Utilities Industry Average (This Year)

No incidents recorded for Westinghouse Electric Company in 2026.

Incident History — Eversource Energy (X = Date, Y = Severity)

Eversource Energy cyber incidents detection timeline including parent company and subsidiaries

Incident History — Westinghouse Electric Company (X = Date, Y = Severity)

Westinghouse Electric Company cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/eversourceenergy.jpeg
Eversource Energy
Incidents

No Incident

https://images.rankiteo.com/companyimages/westinghouse-electric-company.jpeg
Westinghouse Electric Company
Incidents

Date Detected: 12/2024
Type:Ransomware
Motivation: Retaliatory against Romania's political stance
Blog: Blog

FAQ

Eversource Energy company demonstrates a stronger AI Cybersecurity Score compared to Westinghouse Electric Company company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Westinghouse Electric Company company has historically faced a number of disclosed cyber incidents, whereas Eversource Energy company has not reported any.

In the current year, Westinghouse Electric Company company and Eversource Energy company have not reported any cyber incidents.

Westinghouse Electric Company company has confirmed experiencing a ransomware attack, while Eversource Energy company has not reported such incidents publicly.

Neither Westinghouse Electric Company company nor Eversource Energy company has reported experiencing a data breach publicly.

Neither Westinghouse Electric Company company nor Eversource Energy company has reported experiencing targeted cyberattacks publicly.

Neither Eversource Energy company nor Westinghouse Electric Company company has reported experiencing or disclosing vulnerabilities publicly.

Neither Eversource Energy nor Westinghouse Electric Company holds any compliance certifications.

Neither company holds any compliance certifications.

Eversource Energy company has more subsidiaries worldwide compared to Westinghouse Electric Company company.

Westinghouse Electric Company company employs more people globally than Eversource Energy company, reflecting its scale as a Utilities.

Neither Eversource Energy nor Westinghouse Electric Company holds SOC 2 Type 1 certification.

Neither Eversource Energy nor Westinghouse Electric Company holds SOC 2 Type 2 certification.

Neither Eversource Energy nor Westinghouse Electric Company holds ISO 27001 certification.

Neither Eversource Energy nor Westinghouse Electric Company holds PCI DSS certification.

Neither Eversource Energy nor Westinghouse Electric Company holds HIPAA certification.

Neither Eversource Energy nor Westinghouse Electric Company holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

Description

XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services

Description

Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda and red_url parameters.

Description

A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda parameter.