Comparison Overview

Expedia Group

VS

IDEMIA

Expedia Group

1111 Expedia Group Way W., Seattle, 98119, US
Last Update: 2026-01-01

At Expedia Group (NASDAQ: EXPE), we believe travel is a force for good – it opens minds, builds connections, and bridges divides. We create transformative tech that enables unforgettable experiences for all travelers, everywhere. Our trusted family of brands are known and loved by millions, and we power more trips than ​anyone else.​ To learn more about our vision of a more open world through travel, visit www.expediagroup.com. We’re committed to providing an inclusive and accessible recruiting experience for candidates with disabilities, or other physical or mental health conditions. If you require an accommodation or adjustment for any part of the application or recruitment process, please let us know by completing our Accommodation Request Form or contacting your recruiter. Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident about who they are. We do not send job offers via email, or any other messaging tools, to individuals we have not had prior contact with. Our email domain is @expediagroup.com. Our official careers website, where you can to find and apply for job openings, is careers.expediagroup.com/jobs. If you require customer service support to cancel, change or ask about a refund for your trip, you can connect with our 24/7 Virtual Agent through the following links: Expedia: https://www.expedia.com/helpcenter Hotels.com: https://service.hotels.com/en-us/ Vrbo: https://help.vrbo.com/ For additional assistance, direct message us on Twitter @ExpediaHelp with your itinerary number and email address: https://twitter.com/ExpediaHelp

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 21,768
Subsidiaries: 12
12-month incidents
0
Known data breaches
3
Attack type number
1

IDEMIA

2 place Samuel Champlain, Courbevoie, Ile de France, 92400, FR
Last Update: 2025-12-25
Between 750 and 799

IDEMIA Group unlocks simpler and safer ways to pay, connect, access, identify, travel and protect public places. With its long-standing expertise in biometrics and cryptography, IDEMIA develops technologies of excellence with an impactful, ethical, and socially responsible approach. Every day, IDEMIA secures billions of interactions in the physical and digital worlds. IDEMIA Group brings together three market-leading businesses that enable mission-critical solutions: • IDEMIA Secure Transactions is the leading technology provider who unlocks safer and easier ways to pay and connect. For more information, visit www.idemia.com/business/idemia-secure-transactions • IDEMIA Public Security is a leading global provider of biometric solutions that unlock convenient and secure travel, access, and protection. For more information, visit www.idemia.com/business/idemia-public-security • IDEMIA Smart Identity leverages the power of cryptographic and biometric technologies to unlock a single trusted identity for all. For more information, visit www.idemia.com/business/idemia-smart-identity With a global team of nearly 15,000 employees, IDEMIA Group is trusted by over 600 governmental organizations and more than 2,400 enterprises in over 180 countries. For more information, visit www.idemia.com and follow @IDEMIAGroup on X.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 13,546
Subsidiaries: 2
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/expediagroup.jpeg
Expedia Group
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/idemiagroup.jpeg
IDEMIA
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Expedia Group
100%
Compliance Rate
0/4 Standards Verified
IDEMIA
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Expedia Group in 2026.

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for IDEMIA in 2026.

Incident History — Expedia Group (X = Date, Y = Severity)

Expedia Group cyber incidents detection timeline including parent company and subsidiaries

Incident History — IDEMIA (X = Date, Y = Severity)

IDEMIA cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/expediagroup.jpeg
Expedia Group
Incidents

Date Detected: 07/2022
Type:Breach
Attack Vector: Website Hacking
Blog: Blog

Date Detected: 3/2021
Type:Breach
Blog: Blog

Date Detected: 6/2016
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/idemiagroup.jpeg
IDEMIA
Incidents

No Incident

FAQ

Expedia Group company demonstrates a stronger AI Cybersecurity Score compared to IDEMIA company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Expedia Group company has historically faced a number of disclosed cyber incidents, whereas IDEMIA company has not reported any.

In the current year, IDEMIA company and Expedia Group company have not reported any cyber incidents.

Neither IDEMIA company nor Expedia Group company has reported experiencing a ransomware attack publicly.

Expedia Group company has disclosed at least one data breach, while the other IDEMIA company has not reported such incidents publicly.

Neither IDEMIA company nor Expedia Group company has reported experiencing targeted cyberattacks publicly.

Neither Expedia Group company nor IDEMIA company has reported experiencing or disclosing vulnerabilities publicly.

Neither Expedia Group nor IDEMIA holds any compliance certifications.

Neither company holds any compliance certifications.

Expedia Group company has more subsidiaries worldwide compared to IDEMIA company.

Expedia Group company employs more people globally than IDEMIA company, reflecting its scale as a Software Development.

Neither Expedia Group nor IDEMIA holds SOC 2 Type 1 certification.

Neither Expedia Group nor IDEMIA holds SOC 2 Type 2 certification.

Neither Expedia Group nor IDEMIA holds ISO 27001 certification.

Neither Expedia Group nor IDEMIA holds PCI DSS certification.

Neither Expedia Group nor IDEMIA holds HIPAA certification.

Neither Expedia Group nor IDEMIA holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in MadrasThemes MAS Videos allows PHP Local File Inclusion.This issue affects MAS Videos: from n/a through 1.3.2.

Risk Information
cvss3
Base: 7.5
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Description

Cross-Site Request Forgery (CSRF) vulnerability in Hoernerfranz WP-CalDav2ICS allows Stored XSS.This issue affects WP-CalDav2ICS: from n/a through 1.3.4.

Risk Information
cvss3
Base: 7.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Description

Ksenia Security Lares 4.0 Home Automation version 1.6 contains a critical security flaw that exposes the alarm system PIN in the 'basisInfo' XML file after authentication. Attackers can retrieve the PIN from the server response to bypass security measures and disable the alarm system without additional authentication.

Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Ksenia Security Lares 4.0 Home Automation version 1.6 contains an unprotected endpoint vulnerability that allows authenticated attackers to upload MPFS File System binary images. Attackers can exploit this vulnerability to overwrite flash program memory and potentially execute arbitrary code on the home automation system's web server.

Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Ksenia Security Lares 4.0 version 1.6 contains a URL redirection vulnerability in the 'cmdOk.xml' script that allows attackers to manipulate the 'redirectPage' GET parameter. Attackers can craft malicious links that redirect authenticated users to arbitrary websites when clicking on a specially constructed link hosted on a trusted domain.

Risk Information
cvss3
Base: 8.0
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X